Commit Graph

413 Commits

Author SHA256 Message Date
Ana Guerrero
fd001a2b54 Accepting request 1176743 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1176743
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=198
2024-05-27 09:44:46 +00:00
f81c85db6e Accepting request 1176742 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Fix make install for curl-config.1
  * docs/Makefile.am: make curl-config.1 install
  * Fixed upstream in: github.com/curl/curl/pull/13741
  * Add curl-make-install-curl-config.patch

- Update to 8.8.0:
  * Changes:
    - curl_version_info: provide librtmp version
    - file: add support for directory listings
    - lib: add curl_multi_waitfds
    - NTLM_WB: drop support
    - TLS: add support for ECH (Encrypted Client Hello)
    - urlapi: add CURLU_GET_EMPTY for empty queries and fragments
  * Bugfixes:
    - build: prefer "USE_IPV6" macro internally (was: "ENABLE_IPV6")
    - cd2nroff/manage: use UTC when SOURCE_DATE_EPOCH is set
    - cf-socket: don't try getting local IP without socket
    - cf-socket: remove references to l_ip, l_port
    - configure: make --disable-docs imply --disable-manual
    - curl.h: change CURL_SSLVERSION_* from enum to defines
    - curl_path: make Curl_get_pathname use dynbuf
    - curl_sha512_256: do not use workaround for NetBSD when not needed
    - curl_sha512_256: fix detection of OpenSSL 1.1.1 or later
    - curl_url_get.md: clarify queries and fragments and CURLU_GET_EMPTY
    - DEPRECATE.md: TLS libraries without 1.3 support
    - digest: replace strcpy for empty string with simple assignment
    - doc: pytest "--repeat" -> "--count"
    - docs/cmdline-opts: mention STARTTLS for --ssl and --ssl-reqd
    - dynbuf: fix returncode on memory error
    - ftp: add tracing support

OBS-URL: https://build.opensuse.org/request/show/1176742
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=364
2024-05-24 13:16:12 +00:00
Ana Guerrero
abbe027fda Accepting request 1175819 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1175819
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=197
2024-05-23 13:34:41 +00:00
3516f333d0 Accepting request 1175748 from home:dimstar:Factory
- Add split-provides for libcurl-devel -> libcurl-devel-doc.

See https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Splitting_off_a_sub-package

OBS-URL: https://build.opensuse.org/request/show/1175748
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=362
2024-05-22 12:07:31 +00:00
1baae7ac50 Accepting request 1175379 from home:jengelh:branches:devel:libraries:c_c++
- Spin documentation off to libcurl-devel-doc, this saves buildroots
  495 files and time (mandb is run in %posttrans).

OBS-URL: https://build.opensuse.org/request/show/1175379
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=361
2024-05-21 14:27:56 +00:00
Ana Guerrero
d4af59b488 Accepting request 1163136 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1163136
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=196
2024-03-28 12:52:50 +00:00
73125545f4 Accepting request 1163135 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.7.1:
  * Fixed empty tool_hugehelp.c file
- Update to 8.7.0:
  * Security fixes:
    - [bsc#1221665, CVE-2024-2004] Usage of disabled protocol
    - [bsc#1221667, CVE-2024-2398] HTTP/2 push headers memory-leak
    - [bsc#1221666, CVE-2024-2379] QUIC certificate check bypass with wolfSSL
    - [bsc#1221668, CVE-2024-2466] TLS certificate check bypass with mbedTLS
  * Changes:
    - configure: add --disable-docs flag
    - CURLINFO_USED_PROXY: return bool whether the proxy was used
    - digest: support SHA-512/256
  * Bugfixes:
    - asyn-thread: use wakeup_close to close the read descriptor
    - bufq: writing into a softlimit queue cannot be partial
    - cmake: add USE_OPENSSL_QUIC support
    - cookie: if psl fails, reject the cookie
    - curl: exit on config file parser errors
    - digest: add check for hashing error
    - docs/libcurl: add TLS backend info for all TLS options
    - file: use xfer buf for file:// transfers
    - ftp: do lineend conversions in client writer
    - ftp: fix socket wait activity in ftp_domore_getsock
    - http2: memory errors in the push callbacks are fatal
    - http2: push headers better cleanup
    - libssh/libssh2: return error on too big range
    - OpenSSL QUIC: adapt to v3.3.x
    - setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value
    - setopt: fix disabling all protocols
    - sha512_256: add support for GnuTLS and OpenSSL

OBS-URL: https://build.opensuse.org/request/show/1163135
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=359
2024-03-27 19:18:25 +00:00
Ana Guerrero
d7d886f348 Accepting request 1157133 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1157133
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=195
2024-03-13 21:16:39 +00:00
6e41d11b09 Accepting request 1157132 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
* Upstream commit: https://github.com/curl/curl/commit/744dcf22

OBS-URL: https://build.opensuse.org/request/show/1157132
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=357
2024-03-12 09:15:05 +00:00
25658f4bf7 Accepting request 1157127 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Remove the nghttp2 version requirement as a version guard around
  the nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation
  function was added in curl 8.0.1.
  * Upstream commit: https://github.com/bch/curl/commit/fb2472b9

OBS-URL: https://build.opensuse.org/request/show/1157127
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=356
2024-03-12 09:00:58 +00:00
Ana Guerrero
3356b68b07 Accepting request 1146113 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1146113
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=194
2024-02-15 19:59:41 +00:00
612554bc4d Accepting request 1145417 from home:favogt:branches:devel:libraries:c_c++
- Add patch to fix various TLS related issues including FTP over SSL
  transmission timeouts:
  * 0001-vtls-revert-receive-max-buffer-add-test-case.patch
- Switch to %autosetup

Now with workaround for https://github.com/curl/curl/issues/12914.

OBS-URL: https://build.opensuse.org/request/show/1145417
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=354
2024-02-12 09:49:54 +00:00
Ana Guerrero
e1bca97082 Accepting request 1143014 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1143014
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=193
2024-01-31 22:53:56 +00:00
David Anes
ce6f51d0bc Accepting request 1142991 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.6.0: [bsc#1219149, CVE-2024-0853]
  * Security fixes:
    - CVE-2024-0853: OCSP verification bypass with TLS session reuse
  * Changes:
    - add CURLE_TOO_LARGE, CURLINFO_QUEUE_TIME_T
  * Bugfixes:
    - altsvc: free 'as' when returning error
    - asyn-ares: with modern c-ares, use its default timeout
    - cf-socket: show errno in tcpkeepalive error messages
    - cmdline-opts: update availability for the *-ca-native options
    - configure: when enabling QUIC, check that TLS supports QUIC
    - content_encoding: change return code to typedef'ed enum
    - curl: show ipfs and ipns as supported "protocols"
    - CURLINFO_REFERER.3: clarify that it is the *request* header
    - dist: add tests/errorcodes.pl to the tarball
    - gen.pl: support ## for doing .IP in table-like lists
    - GHA: bump ngtcp2, gnutls, mod_h2, quiche
    - hostip: return error immediately when Curl_ip2addr() fails
    - http3/quiche: fix result code on a stream reset
    - http3: initial support for OpenSSL 3.2 QUIC stack
    - http: check for "Host:" case insensitively
    - http: fix off-by-one error in request method length check
    - http: only act on 101 responses when they are HTTP/1.1
    - lib: add debug log outputs for CURLE_BAD_FUNCTION_ARGUMENT
    - lib: error out on multissl + http3
    - lib: fix variable undeclared error caused by `infof` changes
    - lib: rename Curl_strndup to Curl_memdup0 to avoid misunderstanding
    - lib: strndup/memdup instead of malloc, memcpy and null-terminate
    - libssh2: use `libssh2_session_callback_set2()` with v1.11.1
    - ngtcp2: put h3 at the front of alpn

OBS-URL: https://build.opensuse.org/request/show/1142991
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=352
2024-01-31 12:17:58 +00:00
Ana Guerrero
f7fd53cb10 Accepting request 1137519 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1137519
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=192
2024-01-09 19:48:37 +00:00
030555bd2f Accepting request 1137148 from home:bobbie424242:branches:openSUSE:Factory
Added curl-adjust-pollset-fix.patch to fix broken MPD http streaming:
https://github.com/curl/curl/issues/12632

OBS-URL: https://build.opensuse.org/request/show/1137148
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=350
2024-01-08 09:05:39 +00:00
Ana Guerrero
899d17e362 Accepting request 1131466 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1131466
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=191
2023-12-15 20:46:00 +00:00
358aba2f66 Accepting request 1131465 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.5.0:
  * Security fixes:
    - [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
    - [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Changes:
    - gnutls: support CURLSSLOPT_NATIVE_CA
    - HTTP3: ngtcp2 builds are no longer experimental
  * Bugfixes:
    - asyn-thread: use pipe instead of socketpair for IPC when available
    - cmake: fix OpenSSL quic detection in quiche builds
    - conncache: use the closure handle when disconnecting surplus connections
    - content_encoding: make Curl_all_content_encodings allocless
    - cookie: lowercase the domain names before PSL checks
    - Curl_http_body: cleanup properly when Curl_getformdata errors
    - CURLMOPT_MAX_CONCURRENT_STREAMS: make sure the set value is within range
    - doh: provide better return code for responses w/o addresses
    - doh: use PIPEWAIT when HTTP/2 is attempted
    - duphandle: also free 'outcurl->cookies' in error path
    - duphandle: make dupset() not return with pointers to old alloced data
    - duphandle: use strdup to clone *COPYPOSTFIELDS if size is not set
    - easy: in duphandle, init the cookies for the new handle
    - easy_lock: add a pthread_mutex_t fallback
    - fopen: create new file using old file's mode
    - fopen: create short(er) temporary file name
    - getenv: PlayStation doesn't have getenv()
    - hostip: show the list of IPs when resolving is done
    - hsts: skip single-dot hostname
    - HTTP/2, HTTP/3: handle detach of onoing transfers
    - http: allow longer HTTP/2 request method names
    - hyper: temporarily remove HTTP/2 support
    - IPFS: fix IPFS_PATH and file parsing
    - multi: during ratelimit multi_getsock should return no sockets
    - multi: use pipe instead of socketpair to *wakeup()
    - ngtcp2: fix races in stream handling
    - ntlm_wb: use pipe instead of socketpair when possible
    - openssl: avoid BN_num_bits() NULL pointer derefs
    - openssl: fix building with v3 `no-deprecated` + add CI test
    - openssl: fix infof() to avoid compiler warning for %s with null
    - openssl: identify the "quictls" backend correctly
    - openssl: include SIG and KEM algorithms in verbose
    - openssl: two multi pointer checks should probably rather be asserts
    - openssl: when a session-ID is reused, skip OCSP stapling
    - quic: make eyeballers connect retries stop at weird replies
    - quic: manage connection idle timeouts
    - setopt: check CURLOPT_TFTP_BLKSIZE range on set
    - socks: better buffer size checks for socks4a user and hostname
    - socks: make SOCKS5 use the CURLOPT_IPRESOLVE choice
    - tool: fix --capath when proxy support is disabled
    - tool_getparam: limit --rate to be smaller than number of ms
    - transfer: abort pause send when connection is marked for closing
    - transfer: avoid calling the read callback again after EOF
    - transfer: only reset the FTP wildcard engine in CLEAR state
    - url: don't touch the multi handle when closing internal handles
    - urlapi: avoid null deref if setting blank host to url encode
    - urlapi: skip appending NULL pointer query
    - urlapi: when URL encoding the fragment, pass in the right length
    - vtls: cleanup SSL config management
    - vtls: consistently use typedef names for OpenSSL structs
    - vtls: late clone of connection ssl config
    - vtls: use ALPN "http/1.1" for HTTP/1.x, including HTTP/1.0
  * Rebase curl-secure-getenv.patch
  * Add curl-tests-errorcodes.patch

OBS-URL: https://build.opensuse.org/request/show/1131465
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=348
2023-12-06 17:31:56 +00:00
Ana Guerrero
792b0d2222 Accepting request 1116810 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1116810
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=190
2023-10-12 21:37:25 +00:00
a18af43f06 Accepting request 1116809 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.4.0:
  * Security fixes:
    - SOCKS5 heap buffer overflow [bsc#1215888, CVE-2023-38545]
    - cookie injection with none file [bsc#1215889, CVE-2023-38546]
  * Changes:
    - curl: add support for the IPFS protocols via HTTP gateway
    - curl_multi_get_handles: get easy handles from a multi handle
    - mingw: delete support for legacy mingw.org toolchain
  * Bugfixes:
    - base64: also build for curl
    - cf-socket: simulate slow/blocked receives in debug
    - configure: check for the capath by default
    - connect: expire the timeout when trying next
    - connect: only start the happy eyeballs timer when needed
    - cookie: do not store the expire or max-age strings
    - cookie: remove unnecessary struct fields
    - cookie: set ->running in cookie_init even if data is NULL
    - create-dirs.d: clarify it also uses --output-dirs
    - http2: refused stream handling for retry
    - http: h1/h2 proxy unification
    - http: use per-request counter to check too large headers
    - idn: if idn2_check_version returns NULL, return error
    - lib: enable hmac for digest as well
    - lib: let the max filesize option stop too big transfers too
    - lib: move handling of 'data->req.writer_stack' into Curl_client_write()
    - lib: provide and use Curl_hexencode
    - lib: use wrapper for curl_mime_data fseek callback
    - libssh2: fix error message on failed pubkey-from-file
    - libssh: cap SFTP packet size sent
    - MQTT: improve receive of ACKs

OBS-URL: https://build.opensuse.org/request/show/1116809
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=346
2023-10-11 07:00:14 +00:00
Ana Guerrero
5f2fe79a51 Accepting request 1110821 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1110821
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=189
2023-09-13 18:43:45 +00:00
c2052591a4 Accepting request 1110820 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.3.0: [bsc#1215026, CVE-2023-38039]
  * Changes:
    - curl: make %output{} in -w specify a file to write to
    - gskit: remove
    - lib: --disable-bindlocal builds curl without local binding support
    - nss: remove support for this TLS library
    - tool: add "variable" support
    - trace: make tracing available in non-debug builds
    - url: change default value for CURLOPT_MAXREDIRS to 30
    - urlapi: CURLU_PUNY2IDN - convert from punycode to IDN name
  * Bugfixes:
    - altsvc: accept and parse IPv6 addresses in response headers
    - asyn-ares: reduce timeout to 2000ms
    - aws-sigv4: canonicalize the query
    - aws-sigv4: fix having date header twice in some cases
    - aws-sigv4: handle no-value user header entries
    - c-hyper: adjust the hyper to curlcode conversion
    - c-hyper: fix memory leaks in `Curl_http`
    - cf-haproxy: make CURLOPT_HAPROXY_CLIENT_IP set the *source* IP
    - cf-socket: log successful interface bind
    - cmake: add GnuTLS option
    - cmake: add support for `CURL_DEFAULT_SSL_BACKEND`
    - cmake: detect `SSL_set0_wbio` in OpenSSL
    - configure: trust pkg-config when it's used for zlib
    - configure: use the pkg-config --libs-only-l flag for libssh2
    - connect: stop halving the remaining timeout when less than 600 ms left
    - crypto: ensure crypto initialization works
    - digest: Use hostname to generate spn instead of realm
    - ftp: fix temp write of ipv6 address
    - headers: accept leading whitespaces on first response header

OBS-URL: https://build.opensuse.org/request/show/1110820
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=344
2023-09-13 07:24:13 +00:00
Dominique Leuenberger
cd8cbf525d Accepting request 1101173 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1101173
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=188
2023-07-29 18:09:54 +00:00
0affaeb7d2 Accepting request 1101172 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.2.1:
  * Bugfixes:
    - cfilters: rename close/connect functions to avoid clashes
    - ciphers.d: put URL in first column
    - cmake: add 'libcurlu'/'libcurltool' for unit tests
    - cmake: update ngtcp2 detection
    - configure: check for nghttp2_session_get_stream_local_window_size
    - docs: mark two TLS options for TLS, not SSL
    - docs: provide more see also for cipher options
    - hostip: return IPv6 first for localhost resolves
    - http2: fix regression on upload EOF handling
    - http: VLH, very large header test and fixes
    - libcurl-errors.3: add CURLUE_OK
    - os400: correct EXPECTED_STRING_LASTZEROTERMINATED
    - quiche: fix lookup of transfer at multi
    - quiche: fix segfault and other things
    - rustls: update rustls-ffi 0.10.0
    - socks: print ipv6 address within brackets
    - src/mkhelp: strip off escape sequences
    - tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T
    - transfer: do not clear the credentials on redirect to absolute URL
    - unittest: remove unneeded *_LDADD
    - websocket: rename arguments/variables to match docs

OBS-URL: https://build.opensuse.org/request/show/1101172
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=342
2023-07-28 09:15:05 +00:00
Ana Guerrero
c1b4a6824f Accepting request 1099401 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1099401
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=187
2023-07-25 09:23:05 +00:00
4425a855f3 Accepting request 1099398 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.2.0 [bsc#1213237, CVE-2023-32001]
  * Security fix:
    - CVE-2023-32001: fopen race condition
  * Changes:
    - curl: add --ca-native and --proxy-ca-native
    - curl: add --trace-ids
    - CURLOPT_MAIL_RCPT_ALLOWFAILS: replace CURLOPT_MAIL_RCPT_ALLLOWFAILS
    - haproxy: add --haproxy-clientip flag to set client IPs
    - lib: add CURLINFO_CONN_ID and CURLINFO_XFER_ID 
  * Bugfixes:
    - cf-socket: don't bypass fclosesocket callback if cancelled before connect
    - cf-socket: skip getpeername()/getsockname for TFTP
    - curl: count uploaded data to stop at the originally given size
    - curl: return error when asked to use an unsupported HTTP version
    - http2: fix crash in handling stream weights
    - http2: send HEADER & DATA together if possible
    - http3/ngtcp2: upload EAGAIN handling
    - http: rectify the outgoing Cookie: header field size check
    - hyper: fix EOF handling on input
    - imap: Provide method to disable SASL if it is advertised
    - libssh2: provide error message when setting host key type fails
    - libssh2: use custom memory functions
    - ngtcp2: assigning timeout, but value is overwritten before used
    - quiche: avoid NULL deref in debug logging
    - sectransp: fix EOF handling
    - system.h: remove __IBMC__/__IBMCPP__ guards and apply to all z/OS compiles
    - timeval: use CLOCK_MONOTONIC_RAW if available
    - tls13-ciphers.d: include Schannel
    - tool_easysrc.h: correct `easysrc_perform` for `CURL_DISABLE_LIBCURL_OPTION`
    - tool_operate: allow cookie lines up to 8200 bytes

OBS-URL: https://build.opensuse.org/request/show/1099398
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=340
2023-07-19 07:19:58 +00:00
Dominique Leuenberger
b4848d3894 Accepting request 1089770 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1089770
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=186
2023-06-01 15:19:02 +00:00
a23bbbdc87 Accepting request 1089769 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.1.2:
  * Bugfixes:
    - configure: quote the assignments for run-compiler
    - configure: without pkg-config and no custom path, use -lnghttp2
    - curl: cache the --trace-time value for a second
    - http2: fix EOF handling on uploads with auth negotiation
    - http3: send EOF indicator early as possible
    - lib1560: verify more scheme guessing
    - lib: remove unused functions, make single-use static
    - libcurl.m4: remove trailing 'dnl' that causes this to break autoconf
    - libssh: when keyboard-interactive auth fails, try password
    - misc: fix spelling mistakes
    - page-header: mention curl version and how to figure out current release
    - page-header: minor wording polish in the URL segment
    - scripts/singleuse.pl: add more API calls
    - urlapi: remove superfluous host name check

OBS-URL: https://build.opensuse.org/request/show/1089769
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=338
2023-05-30 09:24:37 +00:00
Dominique Leuenberger
4b4820c272 Accepting request 1088598 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1088598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=185
2023-05-24 18:21:51 +00:00
c6f9420987 Accepting request 1088597 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.1.1:
  * Bugfixes:
    - cf-socket: completely remove the disabled
      USE_RECV_BEFORE_SEND_WORKAROUND
    - checksrc: disallow spaces before labels
    - curl_easy_getinfo: clarify on return data types
    - docs: document that curl_url_cleanup(NULL) is a safe no-op
    - hostip: move easy_lock.h include above curl_memory.h
    - http2: double http request parser max line length
    - http2: increase stream window size to 10 MB
    - lib: rename struct 'http_req' to 'httpreq'
    - ngtcp2: proper handling of uint64_t when adjusting send buffer
    - sectransp.c: make the code c89 compatible
    - select: avoid returning an error on EINTR from select() or poll()
    - url: provide better error message when URLs fail to parse
    - urlapi: allow numerical parts in the host name

OBS-URL: https://build.opensuse.org/request/show/1088597
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=336
2023-05-23 10:38:02 +00:00
Dominique Leuenberger
3265a52277 Accepting request 1087553 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1087553
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=184
2023-05-18 13:18:22 +00:00
ffa320e2d1 Accepting request 1087550 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
* Security fixes:
    - UAF in SSH sha256 fingerprint [bsc#1211230, CVE-2023-28319]
    - siglongjmp race condition [bsc#1211231, CVE-2023-28320]
    - IDN wildcard match [bsc#1211232, CVE-2023-28321]
    - POST-after-PUT confusion [bsc#1211233, CVE-2023-28322]
    - See also: https://curl.se/docs/security.html
    - See full changelog here: https://curl.se/changes.html#8_1_0

OBS-URL: https://build.opensuse.org/request/show/1087550
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=334
2023-05-17 11:44:39 +00:00
acc7ff54e6 Accepting request 1087532 from home:david.anes:branches:devel:libraries:c_c++
- Update to 8.1.0:
  * Changes:
    - curl: add --proxy-http2
    - CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2
    - hostip: refuse to resolve the .onion TLD
    - tool_writeout: add URL component variables  
  * Bugfixes:
    - Many bugfixes. See full changelog here: https://curl.se/changes.html#8_1_0

OBS-URL: https://build.opensuse.org/request/show/1087532
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=333
2023-05-17 11:31:06 +00:00
Dominique Leuenberger
b13f5cfcf1 Accepting request 1073492 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1073492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=183
2023-03-24 14:15:50 +00:00
1175ea57d1 Accepting request 1073488 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.0.1:
  * Bugfixes:
    - fix crash in curl_easy_cleanup

OBS-URL: https://build.opensuse.org/request/show/1073488
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=331
2023-03-21 09:00:32 +00:00
4a9f41fa87 Accepting request 1073050 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 8.0.0:
  * Security fixes:
    - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
    - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
    - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
    - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
    - HSTS double-free [bsc#1209213, CVE-2023-27537]
    - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
    - build: remove support for curl_off_t < 8 bytes 
  * Bugfixes:
    - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
    - BINDINGS: add Fortran binding
    - cf-socket: use port 80 when resolving name for local bind
    - cookie: don't load cookies again when flushing
    - curl_path: create the new path with dynbuf
    - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
    - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
    - ftp: active mode with SSL, add the filter
    - hostip: avoid sscanf and extra buffer copies
    - http2: fix for http2-prior-knowledge when reusing connections
    - http2: fix handling of RST and GOAWAY to recognize partial transfers
    - http: don't send 100-continue for short PUT requests
    - http: fix unix domain socket use in https connects
    - libssh: use dynbuf instead of realloc
    - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
    - sectransp: make read_cert() use a dynbuf when loading
    - telnet: only accept option arguments in ascii
    - telnet: parse telnet options without sscanf
    - url: fix the SSH connection reuse check

OBS-URL: https://build.opensuse.org/request/show/1073050
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=330
2023-03-20 08:30:14 +00:00
Dominique Leuenberger
9d7141f187 Accepting request 1066797 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1066797
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=182
2023-02-28 11:47:41 +00:00
4e4d9e6376 Accepting request 1066794 from home:Guillaume_G:branches:devel:libraries:c_c++
- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch

OBS-URL: https://build.opensuse.org/request/show/1066794
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=328
2023-02-20 11:03:09 +00:00
bee35a323f Accepting request 1066056 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
    - CVE-2023-23914: HSTS ignored on multiple requests
    - CVE-2023-23915: HSTS amnesia with --parallel
    - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
    - curl.h: add CURL_HTTP_VERSION_3ONLY
    - share: add sharing of HSTS cache among handles
    - src: add --http3-only
    - tool_operate: share HSTS between handles
    - urlapi: add CURLU_PUNYCODE
    - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
    - cf-socket: keep sockaddr local in the socket filters
    - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
    - curl.h: allow up to 10M buffer size
    - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
    - curl/websockets.h: extend the websocket frame struct
    - curl: output warning at --verbose output for debug-enabled version
    - curl_free.3: fix return type of `curl_free`
    - curl_log: for failf/infof and debug logging implementations
    - dict: URL decode the entire path always
    - docs/DEPRECATE.md: deprecate gskit
    - easyoptions: fix header printing in generation script
    - haxproxy: send before TLS handhshake
    - hsts.d: explain hsts more
    - hsts: handle adding the same host name again
    - HTTP/[23]: continue upload when state.drain is set
    - http: decode transfer encoding first

OBS-URL: https://build.opensuse.org/request/show/1066056
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=327
2023-02-15 21:29:29 +00:00
Dominique Leuenberger
311e718525 Accepting request 1044033 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1044033
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=181
2022-12-23 09:20:42 +00:00
David Anes
2c31e47564 Accepting request 1044030 from home:david.anes:branches:devel:libraries:c_c++
- Update to 7.87.0: 
  * Security fixes:
    - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
    - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
    - curl: add --url-query
    - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
    - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
    - openssl: reduce CA certificate bundle reparsing by caching
    - version: add a feature names array to curl_version_info_data 
  * Bugfixes
    - altsvc: fix rejection of negative port numbers
    - aws_sigv4: consult x-%s-content-sha256 for payload hash
    - aws_sigv4: fix typos in aws_sigv4.c
    - base64: better alloc size
    - base64: encode without using snprintf
    - base64: faster base64 decoding
    - build: assume assert.h is always available
    - build: assume errno.h is always available
    - c-hyper: CONNECT respones are not server responses
    - c-hyper: fix multi-request mechanism
    - CI: Change FreeBSD image from 12.3 to 12.4
    - CI: LGTM.com will be shut down in December 2022
    - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
    - cmake: check for cross-compile, not for toolchain
    - CMake: fix build with `CURL_USE_GSSAPI`
    - cmake: really enable warnings with clang
    - cmake: set the soname on the shared library
    - cmdline-opts/gen.pl: fix the linkifier
    - cmdline-opts/page-footer: remove long option nroff formatting

OBS-URL: https://build.opensuse.org/request/show/1044030
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=325
2022-12-21 09:09:08 +00:00
Dominique Leuenberger
abd085edd2 Accepting request 1036175 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1036175
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=180
2022-11-17 16:23:45 +00:00
David Anes
ad1aae2453 Accepting request 1035938 from home:luc14n0:branches:devel:libraries:c_c++
Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation, introduced by nghttp2 1.50.0 release, without introducing a check for the function/right version in their build scripts.

OBS-URL: https://build.opensuse.org/request/show/1035938
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=323
2022-11-16 08:43:02 +00:00
Dominique Leuenberger
3cbe49505f Accepting request 1031306 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1031306
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=179
2022-10-27 11:52:26 +00:00
abfeb2c0ec Accepting request 1031305 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 7.86.0:
  * Security fixes:
    - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
    - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
    - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
    - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
    - NPN: remove support for and use of
    - Websockets: initial support
  * Bugfixes:
    - altsvc: reject bad port numbers
    - autotools: reduce brute-force when detecting recv/send arg list
    - aws_sigv4: fix header computation
    - cli tool: do not use disabled protocols
    - connect: change verbose IPv6 address:port to [address]:port
    - connect: fix builds without AF_INET6
    - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
    - connect: fix the wrong error message on connect failures
    - content_encoding: use writer struct subclasses for different encodings
    - cookie: reject cookie names or content with TAB characters
    - curl/add_file_name_to_url: use the libcurl URL parser
    - curl/get_url_file_name: use libcurl URL parser
    - curl: warn for --ssl use, considered insecure
    - docs/libcurl/symbols-in-versions: add several missing symbols
    - ftp: ignore a 550 response to MDTM
    - functypes: provide the recv and send arg and return types
    - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
    - header: define public API functions as extern c
    - headers: reset the requests counter at transfer start
    - hostip: guard PF_INET6 use

OBS-URL: https://build.opensuse.org/request/show/1031305
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=321
2022-10-26 09:49:48 +00:00
Dominique Leuenberger
aaf293deb5 Accepting request 1009293 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1009293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=178
2022-10-12 16:23:28 +00:00
881171ebca Accepting request 1008961 from home:vulyanov:branches:Virtualization
- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch

OBS-URL: https://build.opensuse.org/request/show/1008961
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=319
2022-10-10 08:08:34 +00:00
Dominique Leuenberger
7b39cc125d Accepting request 1000435 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1000435
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=177
2022-09-01 20:09:29 +00:00
c9f82120ba Accepting request 1000420 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
    - control code in cookie denial of service
  * Changes:
    - quic: add support via wolfSSL
    - schannel: Add TLS 1.3 support
    - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
    - asyn-thread: fix socket leak on OOM
    - asyn-thread: make getaddrinfo_complete return CURLcode
    - base64: base64url encoding has no padding
    - configure: fix broken m4 syntax in TLS options
    - configure: if asked to use TLS, fail if no TLS lib was detected
    - connect: add quic connection information
    - connect: set socktype/protocol correctly
    - cookie: reject cookies with "control bytes"
    - cookie: treat a blank domain in Set-Cookie: as non-existing
    - curl: output warning when a cookie is dropped due to size
    - Curl_close: call Curl_resolver_cancel to avoid memory-leak
    - digest: fix memory leak, fix not quoted 'opaque'
    - digest: fix missing increment of 'nc' value for auth-int
    - digest: pass over leading spaces in qop values
    - digest: reject broken header with session protocol but without qop
    - doh: use https protocol by default
    - easy_lock.h: include sched.h if available to fix build
    - easy_lock.h: use __asm__ instead of asm to fix build
    - easy_lock: switch to using atomic_int instead of bool
    - ftp: use a correct expire ID for timer expiry
    - h2h3: fix overriding the 'TE: Trailers' header
    - hostip: resolve *.localhost to 127.0.0.1/::1

OBS-URL: https://build.opensuse.org/request/show/1000420
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=317
2022-08-31 11:55:07 +00:00
Fabian Vogt
2a4d89b9f1 Accepting request 990904 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/990904
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=176
2022-07-31 21:00:08 +00:00