f4c9980a8f
Accepting request 1318709 from devel:libraries:c_c++
Ana Guerrero2025-11-21 15:54:21 +00:00
00f1d552d4
Security Fixes 2
Pedro Monreal
2025-11-19 16:23:46 +01:00
871a7f5ad0
CVE-2025-11563
Pedro Monreal
2025-11-19 16:02:17 +01:00
93d9905967
Accepting request 1318708 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-11-19 13:59:05 +00:00
42e50e1e93
Accepting request 1315729 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-11-05 16:32:15 +00:00
efd440beb9
Version update and CVE fixes: - [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path - [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
Pedro Monreal2025-10-20 13:16:33 +02:00
e940d25a95
Accepting request 1307305 from devel:libraries:c_c++
Ana Guerrero2025-10-01 16:55:30 +00:00
abacc9ddcc
Accepting request 1307300 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-09-26 07:58:03 +00:00
f6762dad79
Accepting request 1303556 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-09-10 09:31:19 +00:00
12e0af270e
Accepting request 1294773 from devel:libraries:c_c++
Ana Guerrero2025-07-22 10:54:04 +00:00
751f239008
Accepting request 1294773 from devel:libraries:c_c++
Ana Guerrero2025-07-22 10:54:04 +00:00
1f692eef2b
Accepting request 1294765 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-07-21 09:36:38 +00:00
b6b0cf9ac0
- Update to 8.15.0: * Changes: - TLS: remove support for Secure Transport and BearSSL * Bugfixes: - cf-socket: make socket data_pending a nop - configure: order LDAP after the SSL libraries - curl: improve non-blocking STDIN performance - curl_get_line: make sure lines end with newline - curl_path: make SFTP handle a path like /~ properly. - curlinfo: provide the 'digest' feature - digest: fix build with disabled digest auth - docs: note SSLS-EXPORT feature in -ssl-sessions doc - docs: reflect that delimiter-separated capath is only OpenSSL - docs: sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS - http/3: report handshake with version and cipher as for TCP connections - http2: do not delay RST send on aborted transfer - http_ntlm: protect against null deref - ldap: initial support for --with-ldap option - lib: address singleuse issues - lib: avoid reusing unclean connection - lib: drop two interim macros in favor of native libcurl API calls - lib: stop 'time()' debug overrides at the end of source in altsvc, hsts - lib: unify recv/send function signatures - memdebug.h: #undef 'fclose' before defining it - openssl: enable readahead - openssl: error on SSL_ERROR_SYSCALL - openssl: fix handling of buffered data - openssl: fix openssl engine use - openssl: fix pkcs11 provider available check - quic: implement CURLINFO_TLS_SSL_PTR
Pedro Monreal Gonzalez2025-07-21 09:36:38 +00:00
82227ddcf3
Accepting request 1293071 from devel:libraries:c_c++
Ana Guerrero2025-07-15 14:42:01 +00:00
f7adb3cfcd
Accepting request 1293071 from devel:libraries:c_c++
Ana Guerrero2025-07-15 14:42:01 +00:00
8e1bf622e0
Accepting request 1293070 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-07-14 08:53:01 +00:00
0ae08fe5a6
- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197] * tool_getparam: fix --ftp-pasv [5f805ee] * Add curl-fix--ftp-pasv.patch
Pedro Monreal Gonzalez2025-07-14 08:53:01 +00:00
366d7391a2
Accepting request 1290049 from devel:libraries:c_c++
Ana Guerrero2025-07-06 15:03:18 +00:00
17334a1160
Accepting request 1290049 from devel:libraries:c_c++
Ana Guerrero2025-07-06 15:03:18 +00:00
3df0461d15
- add fix-return-code-with-retry.patch to fix return code being successful even on failures when using -f --retry
Dirk Mueller2025-07-02 20:12:53 +00:00
5237727800
- add fix-return-code-with-retry.patch to fix return code being successful even on failures when using -f --retry
Dirk Mueller2025-07-02 20:12:53 +00:00
013fb4d980
Accepting request 1289247 from devel:libraries:c_c++
Ana Guerrero2025-07-01 09:33:32 +00:00
b99b5bce77
Accepting request 1289247 from devel:libraries:c_c++
Ana Guerrero2025-07-01 09:33:32 +00:00
3d5df01f12
Accepting request 1289246 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-06-30 11:05:45 +00:00
195ec64892
- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]
Pedro Monreal Gonzalez2025-06-30 11:05:45 +00:00
cdcfda0cc3
Accepting request 1287799 from devel:libraries:c_c++
Ana Guerrero2025-06-27 21:00:27 +00:00
3e7cec425e
Accepting request 1287799 from devel:libraries:c_c++
Ana Guerrero2025-06-27 21:00:27 +00:00
88eceec73c
- split wcurl into a subpackage so that upgrade works (wcurl used to be a separate package)
Dirk Mueller2025-06-23 09:13:08 +00:00
799a80fb1e
- split wcurl into a subpackage so that upgrade works (wcurl used to be a separate package)
Dirk Mueller2025-06-23 09:13:08 +00:00
98f4905592
Accepting request 1287575 from home:crameleon:branches:devel:libraries:c_c++
Dirk Mueller2025-06-23 05:39:08 +00:00
a1aa9722cb
Accepting request 1287575 from home:crameleon:branches:devel:libraries:c_c++
Dirk Mueller2025-06-23 05:39:08 +00:00
faed6e9985
Accepting request 1284866 from devel:libraries:c_c++
Ana Guerrero2025-06-12 13:47:40 +00:00
aa1c309163
Accepting request 1284866 from devel:libraries:c_c++
Ana Guerrero2025-06-12 13:47:40 +00:00
021b29a7f7
Accepting request 1284864 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-06-11 13:43:44 +00:00
d578d85b86
Accepting request 1284836 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-06-11 13:11:53 +00:00
801d714429
- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056] * Add curl-mini.rpmlintrc to avoid rpmling shlib-policy-name-error when building the curl-mini package in SLE. * Add libssh minimum version requirements. * Use ldconfig_scriptlets when available.
Pedro Monreal Gonzalez2025-06-11 13:11:53 +00:00
8375d0741b
Accepting request 1282599 from devel:libraries:c_c++
Ana Guerrero2025-06-06 20:35:11 +00:00
edf74d37b1
Accepting request 1282599 from devel:libraries:c_c++
Ana Guerrero2025-06-06 20:35:11 +00:00
84449633aa
Accepting request 1282597 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-06-04 08:31:26 +00:00
f1b5d20e66
- Update to 8.14.1: * Security fixes: - [bsc#1243933, CVE-2025-5399] libcurl can possibly get trapped in an endless busy-loop when processing specially crafted packets [d1145df2] * Bugfixes: - asyn-thrdd: fix cleanup when RR fails due to OOM - ftp: fix teardown of DATA connection in done - http: fail early when rewind of input failed when following redirects - multi: fix add_handle resizing - tls BIOs: handle BIO_CTRL_EOF correctly - tool_getparam: make --no-anyauth not be accepted - wolfssl: fix sending of early data - ws: handle blocked sends better - ws: tests and fixes
Pedro Monreal Gonzalez2025-06-04 08:31:26 +00:00
c1e69d782c
Accepting request 1268148 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-04-09 11:35:43 +00:00
fe5862c747
- Update to 8.13.0: * Changes: - curl: add write-out variable 'tls_earlydata' - curl: make --url support a file with URLs - gnutls: set priority via --ciphers - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY - OpenSSL/quictls: add support for TLSv1.3 early data - rustls: add support for CERTINFO - rustls: add support for SSLKEYLOGFILE - rustls: support ECH w/ DoH lookup for config - rustls: support native platform verifier - var: add a '64dec' function that can base64 decode a string * Bugfixes: - conn: fix connection reuse when SSL is optional - hash: use single linked list for entries - http2: detect session being closed on ingress handling - http2: reset stream on response header error - http: remove a HTTP method size restriction - http: version negotiation - httpsrr: fix port detection - libssh: fix freeing of resources in disconnect - libssh: fix scp large file upload for 32-bit size_t systems - openssl-quic: do not iterate over multi handles - openssl: check return value of X509_get0_pubkey - openssl: drop support for old OpenSSL/LibreSSL versions - openssl: fix crash on missing cert password - openssl: fix pkcs11 URI checking for key files. - openssl: remove bad gotos into other scope - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
Pedro Monreal Gonzalez2025-04-09 11:35:43 +00:00
6e3104718a
Accepting request 1245678 from devel:libraries:c_c++
Ana Guerrero2025-02-14 18:19:45 +00:00
d6ff38ecdd
Accepting request 1245678 from devel:libraries:c_c++
Ana Guerrero2025-02-14 18:19:45 +00:00
d7c7d1823c
Accepting request 1245677 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-02-13 14:40:45 +00:00
303cee473a
Accepting request 1245668 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-02-13 14:15:37 +00:00
163a33bc6f
- Update to 8.12.1: * Bugfixes: - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR' - asyn-thread: fix HTTPS RR crash - asyn-thread: fix the returned bitmask from Curl_resolver_getsock - asyn-thread: survive a c-ares channel set to NULL - cmake: always reference OpenSSL and ZLIB via imported targets - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config' - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config' - content_encoding: #error on too old zlib - imap: TLS upgrade fix - ldap: drop support for legacy Novell LDAP SDK - libssh2: comparison is always true because rc <= -1 - libssh2: raise lowest supported version to 1.2.8 - libssh: drop support for libssh older than 0.9.0 - openssl-quic: ignore ciphers for h3 - pop3: TLS upgrade fix - runtests: fix the disabling of the memory tracking - runtests: quote commands to support paths with spaces - scache: add magic checks - smb: silence '-Warray-bounds' with gcc 13+ - smtp: TLS upgrade fix - tool_cfgable: sort struct fields by size, use bitfields for booleans - tool_getparam: add "TLS required" flag for each such option - vtls: fix multissl-init - wakeup_write: make sure the eventfd write sends eight bytes
Pedro Monreal Gonzalez2025-02-13 14:15:37 +00:00
d6572be314
Updating link to change in openSUSE:Factory/curl revision 208
OBS User buildservice-autocommit
2025-02-08 08:32:55 +00:00
97ce40b299
Updating link to change in openSUSE:Factory/curl revision 208
OBS User buildservice-autocommit
2025-02-08 08:32:55 +00:00
9c70340b82
Accepting request 1243598 from devel:libraries:c_c++
Ana Guerrero2025-02-07 21:46:51 +00:00
187a692adb
Accepting request 1243598 from devel:libraries:c_c++
Ana Guerrero2025-02-07 21:46:51 +00:00
5e648ce955
Accepting request 1243583 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2025-02-06 09:58:18 +00:00
38189aa2cc
- Update to 8.12.0: * Security fixes: - [bsc#1234068, CVE-2024-11053] curl could leak the password used for the first host to the followed-to host under certain circumstances. - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry - [bsc#1236589, CVE-2025-0665] eventfd double close * Changes: - curl: add byte range support to --variable reading from file - curl: make --etag-save acknowledge --create-dirs - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var - getinfo: provide info which auth was used for HTTP and proxy - hyper: drop support - openssl: add support to use keys and certificates from PKCS#11 provider - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA - vtls: feature ssls-export for SSL session im-/export * Bugfixes: - altsvc: avoid integer overflow in expire calculation - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL - asyn-ares: fix memory leak - asyn-ares: initial HTTPS resolve support - asyn-thread: use c-ares to resolve HTTPS RR - async-thread: avoid closing eventfd twice - cd2nroff: do not insist on quoted <> within backticks - cd2nroff: support "none" as a TLS backend - conncache: count shutdowns against host and max limits - content_encoding: drop support for zlib before 1.2.0.4 - content_encoding: namespace GZIP flag constants - content_encoding: put the decomp buffers into the writer structs - content_encoding: support use of custom libzstd memory functions - cookie: cap expire times to 400 days
Pedro Monreal Gonzalez2025-02-06 09:58:18 +00:00
398dd758e0
Accepting request 1230014 from devel:libraries:c_c++
Ana Guerrero2024-12-13 21:30:53 +00:00
a6813ee169
Accepting request 1230014 from devel:libraries:c_c++
Ana Guerrero2024-12-13 21:30:53 +00:00
98ca4ac627
Accepting request 1230013 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-12-11 08:14:01 +00:00
d0ee3ff81d
Accepting request 1230013 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-12-11 08:14:01 +00:00
79f398aff7
Accepting request 1224026 from devel:libraries:c_c++
Ana Guerrero2024-11-15 14:38:40 +00:00
92eb13e81c
Accepting request 1224026 from devel:libraries:c_c++
Ana Guerrero2024-11-15 14:38:40 +00:00
0f3d202c49
Accepting request 1223970 from home:Thaodan:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-11-13 18:24:08 +00:00
e514e4adb9
- Add patch to fix libcurl when netrc parsing is enabled. curl_easy_duphandle did not init netrc which broke applications such as for example git. gh#curl/curl#15496 * 0001-duphandle-also-init-netrc.patch
Pedro Monreal Gonzalez2024-11-13 18:24:08 +00:00
c1ecabf7c1
Accepting request 1221730 from devel:libraries:c_c++
Ana Guerrero2024-11-08 10:56:03 +00:00
bc63b04b00
Accepting request 1221730 from devel:libraries:c_c++
Ana Guerrero2024-11-08 10:56:03 +00:00
57ba1d80f0
Accepting request 1221729 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-11-06 10:59:39 +00:00
d96983c1ca
Accepting request 1221703 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-11-06 08:59:33 +00:00
6f54666362
- Update to 8.11.0: * Security fixes: [bsc#1232528, CVE-2024-9681] * curl: HSTS subdomain overwrites parent cache entry * Changes: - curl: --create-dirs works for --dump-header as well - gtls: Add P12 format support - ipfs: add options to disable - TLS: TLSv1.3 earlydata support for curl - WebSockets: make support official (non-experimental) * Bugfixes: - build: clarify CA embed is for curl tool, mark default, improve summary - build: show if CA bundle to embed was found - build: tidy up and improve versioned-symbols options - cmake/FindNGTCP2: use library path as hint for finding crypto module - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled - cmake: rename LDAP dependency config variables to match Find modules - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection - cmake: use OpenSSL for LDAP detection only if available - curl: add build options for safe/no CA bundle search (Windows) - curl: detect ECH support dynamically, not at build time - curl_addrinfo: support operating systems with only getaddrinfo(3) - ftp: fix 0-length last write on upload from stdin - gnutls: use session cache for QUIC - hsts: improve subdomain handling - hsts: support "implied LWS" properly around max-age - http2: auto reset stream on server eos - json.md: cli-option '--json' is an alias of '--data-binary' - lib: move curl_path.[ch] into vssh/ - lib: remove function pointer typecasts for hmac/sha256/md5 - libssh.c: handle EGAINS during proto-connect correctly
Pedro Monreal Gonzalez2024-11-06 08:59:33 +00:00
fe6740ebd3
Accepting request 1202949 from devel:libraries:c_c++
Ana Guerrero2024-09-25 19:52:52 +00:00
0a3d251863
Accepting request 1202949 from devel:libraries:c_c++
Ana Guerrero2024-09-25 19:52:52 +00:00
18aeb99e27
Accepting request 1202947 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-09-24 12:23:33 +00:00
af35f5848c
- Update to 8.10.1: * Bugfixes: - autotools: fix --with-ca-embed build rule - cmake: ensure CURL_USE_OPENSSL/USE_OPENSSL_QUIC are set in sync - cmake: fix MSH3 to appear on the feature list - connect: store connection info when really done - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a - http2: when uploading data from stdin, fix eos forwarding - http: make max-filesize check not count ignored bodies - lib: fix AF_INET6 use outside of USE_IPV6 - multi: check that the multi handle is valid in curl_multi_assign - QUIC: on connect, keep on trying on draining server - request: correctly reset the eos_sent flag - setopt: remove superfluous use of ternary expressions - singleuse: drop Curl_memrchr() for no-HTTP builds - tool_cb_wrt: use "curl_response" if no file name in URL - transfer: fix sendrecv() without interim poll - vtls: fix Curl_ssl_conn_config_match doc param
Pedro Monreal Gonzalez2024-09-24 12:23:33 +00:00
15557f9d7c
Accepting request 1200087 from devel:libraries:c_c++
Ana Guerrero2024-09-12 14:54:04 +00:00
7e3c72331b
Accepting request 1200087 from devel:libraries:c_c++
Ana Guerrero2024-09-12 14:54:04 +00:00
b4d452fa2f
Accepting request 1200084 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-09-11 09:48:55 +00:00
1b4d5053ee
- Update to version 8.10.0: * Security fixes: - [bsc#1230093, CVE-2024-8096] curl: OCSP stapling bypass with GnuTLS * Changes: - curl: make --rate accept "number of units" - curl: make --show-headers the same as --include - curl: support --dump-header % to direct to stderr - curl: support embedding a CA bundle and --dump-ca-embed - curl: support repeated use of the verbose option; -vv etc - curl: use libuv for parallel transfers with --test-event - vtls: stop offering alpn http/1.1 for http2-prior-knowledge * Bugfixes: - curl: allow 500MB data URL encode strings - curl: warn on unsupported SSL options - Curl_rand_bytes to control env override - curl_sha512_256: fix symbol collisions with nettle library - dist: fix reproducible build from release tarball - http2: fix GOAWAY message sent to server - http2: improve rate limiting of downloads - INSTALL.md: MultiSSL and QUIC are mutually exclusive - lib: add eos flag to send methods - lib: make SSPI global symbols use Curl_ prefix - lib: prefer CURL_SHA256_DIGEST_LENGTH over the unprefixed name - lib: remove the final strncpy() calls - lib: remove use of RANDOM_FILE - Makefile.mk: fixup enabling libidn2 - max-filesize.md: mention zero disables the limit - mime: avoid inifite loop in client reader - ngtcp2: use NGHTTP3 prefix instead of NGTCP2 for errors in h3 callbacks - openssl quic: fix memory leak
Pedro Monreal Gonzalez2024-09-11 09:48:55 +00:00
272c0e8f53
Accepting request 1193337 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
Pedro Monreal Gonzalez2024-08-12 06:51:32 +00:00
3016d19102
- Fix regression introduced in version 8.9.1: * sigpipe: init the struct so that first apply ignores * Add curl-sigpipe.patch
Pedro Monreal Gonzalez2024-08-12 06:51:32 +00:00
Pedro Monreal
slfo-1.2
Lucas Mulling
Ana Guerrero
Pedro Monreal Gonzalez
Adrian Schröter
Dirk Mueller
Dominique Leuenberger
OBS User buildservice-autocommit