c7dbf5559a
Changes:
* nss: additional cipher suites are now accepted by
CURLOPT_SSL_CIPHER_LIST
* New option: CURLOPT_KEEP_SENDING_ON_ERROR
Bugfixes:
* CVE-2016-8615: cookie injection for other servers
* CVE-2016-8616: case insensitive password comparison
* CVE-2016-8617: OOB write via unchecked multiplication
* CVE-2016-8618: double-free in curl_maprintf
* CVE-2016-8619: double-free in krb5 code
* CVE-2016-8620: glob parser write/read out of bounds
* CVE-2016-8621: curl_getdate read out of bounds
* CVE-2016-8622: URL unescape heap overflow via integer truncation
* CVE-2016-8623: Use-after-free via shared cookies
* CVE-2016-8624: invalid URL parsing with '#'
* CVE-2016-8625: IDNA 2003 makes curl use wrong host
* openssl: fix per-thread memory leak using 1.0.1 or 1.0.2
* http: accept "Transfer-Encoding: chunked" for HTTP/2 as well
* LICENSE-MIXING.md: update with mbedTLS dual licensing
* examples/imap-append: Set size of data to be uploaded
* test2048: fix url
* darwinssl: disable RC4 cipher-suite support
* CURLOPT_PINNEDPUBLICKEY.3: fix the AVAILABILITY formatting
* openssl: don’t call CRYTPO_cleanup_all_ex_data
* libressl: fix version output
* easy: Reset all statistical session info in curl_easy_reset
* curl_global_cleanup.3: don't unload the lib with sub threads running
* dist: add CurlSymbolHiding.cmake to the tarball
* docs: Remove that --proto is just used for initial retrieval
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=176
199 lines
5.8 KiB
RPMSpec
199 lines
5.8 KiB
RPMSpec
#
|
|
# spec file for package curl
|
|
#
|
|
# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%bcond_without openssl
|
|
%bcond_with mozilla_nss
|
|
%bcond_without testsuite
|
|
Name: curl
|
|
Version: 7.51.0
|
|
Release: 0
|
|
Summary: A Tool for Transferring Data from URLs
|
|
License: BSD-3-Clause and MIT
|
|
Group: Productivity/Networking/Web/Utilities
|
|
Url: https://curl.haxx.se/
|
|
Source: https://curl.haxx.se/download/%{name}-%{version}.tar.lzma
|
|
Source2: https://curl.haxx.se/download/%{name}-%{version}.tar.lzma.asc
|
|
Source3: baselibs.conf
|
|
Source4: https://daniel.haxx.se/mykey.asc#/%{name}.keyring
|
|
Patch0: libcurl-ocloexec.patch
|
|
Patch1: dont-mess-with-rpmoptflags.diff
|
|
Patch3: curl-secure-getenv.patch
|
|
Patch4: curl-disable_failing_tests.patch
|
|
BuildRequires: groff
|
|
BuildRequires: krb5-mini-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: lzma
|
|
BuildRequires: openldap2-devel
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: pkgconfig(libidn)
|
|
BuildRequires: pkgconfig(libmetalink)
|
|
BuildRequires: pkgconfig(libnghttp2)
|
|
BuildRequires: pkgconfig(libpsl)
|
|
BuildRequires: pkgconfig(libssh2)
|
|
BuildRequires: pkgconfig(zlib)
|
|
Requires: libcurl4 = %{version}
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
%if %{with openssl}
|
|
BuildRequires: pkgconfig(libssl)
|
|
%endif
|
|
%if %{with mozilla_nss}
|
|
BuildRequires: mozilla-nss-devel
|
|
%endif
|
|
#BuildRequires: openssh
|
|
%if 0%{?_with_stunnel:1}
|
|
# used by the testsuite
|
|
BuildRequires: stunnel
|
|
%endif
|
|
# bug437293
|
|
%ifarch ppc64
|
|
Obsoletes: curl-64bit
|
|
%endif
|
|
|
|
%description
|
|
Curl is a client to get documents and files from or send documents to a
|
|
server using any of the supported protocols (HTTP, HTTPS, FTP, FTPS,
|
|
TFTP, DICT, TELNET, LDAP, or FILE). The command is designed to work
|
|
without user interaction or any kind of interactivity.
|
|
|
|
%package -n libcurl4
|
|
Summary: Version 4 of cURL shared library
|
|
Group: Productivity/Networking/Web/Utilities
|
|
|
|
%description -n libcurl4
|
|
The cURL shared library version 4 for accessing data using different
|
|
network protocols.
|
|
|
|
%package -n libcurl-devel
|
|
Summary: A Tool for Transferring Data from URLs
|
|
Group: Development/Libraries/C and C++
|
|
Requires: glibc-devel
|
|
Requires: libcurl4 = %{version}
|
|
# curl-devel (v 7.15.5) was last used in 10.2
|
|
Provides: curl-devel <= 7.15.5
|
|
Obsoletes: curl-devel < 7.16.2
|
|
|
|
%description -n libcurl-devel
|
|
Curl is a client to get documents and files from or send documents to a
|
|
server using any of the supported protocols (HTTP, HTTPS, FTP, GOPHER,
|
|
DICT, TELNET, LDAP, or FILE). The command is designed to work without
|
|
user interaction or any kind of interactivity.
|
|
|
|
%prep
|
|
%setup -q
|
|
%patch0
|
|
%patch1
|
|
%patch3
|
|
%patch4 -p1
|
|
|
|
%build
|
|
# curl complains if macro definition is contained in CFLAGS
|
|
# see m4/xc-val-flgs.m4
|
|
CPPFLAGS="-D_FORTIFY_SOURCE=2"
|
|
CFLAGS=$(echo "%{optflags}" | sed -e 's/-D_FORTIFY_SOURCE=2//')
|
|
export CPPFLAGS CFLAGS
|
|
export CFLAGS="$CFLAGS -fPIE"
|
|
export LDFLAGS="$LDFLAGS -pie"
|
|
autoreconf -fiv
|
|
# local hack to make curl-config --libs stop printing libraries it depends on
|
|
# (currently, libtool sets link_all_deplibs=(yes|unknown) everywhere,
|
|
# will hopefully change in the future)
|
|
sed -i 's/\(link_all_deplibs=\)unknown/\1no/' configure
|
|
%configure \
|
|
--enable-ipv6 \
|
|
%if %{with openssl}
|
|
--with-ssl \
|
|
--with-ca-fallback \
|
|
--without-ca-path \
|
|
--without-ca-bundle \
|
|
%else
|
|
--without-ssl \
|
|
%if %{with mozilla_nss}
|
|
--with-nss \
|
|
%endif
|
|
%endif
|
|
--with-gssapi=%{_libexecdir}/mit \
|
|
--with-libssh2\
|
|
--enable-hidden-symbols \
|
|
--disable-static \
|
|
--enable-threaded-resolver \
|
|
--with-libmetalink
|
|
|
|
# if this fails, the above sed hack did not work
|
|
./libtool --config | grep -q link_all_deplibs=no
|
|
# enable-hidden-symbols needs gcc4 and causes that curl exports only its API
|
|
make %{?_smp_mflags} V=1
|
|
|
|
%if %{with testsuite}
|
|
%check
|
|
pushd tests
|
|
make %{?_smp_mflags}
|
|
# make sure the testsuite runs don't race on MP machines in autobuild
|
|
if test -z "$BUILD_INCARNATION" -a -r /.buildenv; then
|
|
. /.buildenv
|
|
fi
|
|
if test -z "$BUILD_INCARNATION"; then
|
|
BUILD_INCARNATION=0
|
|
fi
|
|
|
|
base=$((8990 + $BUILD_INCARNATION * 20))
|
|
# bug940009 do not run flaky tests for any architecture
|
|
# at least test 1510 do fail for i586 and ppc64le
|
|
perl ./runtests.pl -a -b$base '!flaky' || exit
|
|
|
|
popd
|
|
%endif
|
|
|
|
%install
|
|
%make_install
|
|
rm -f %{buildroot}%{_libdir}/libcurl.la
|
|
install -Dm 0644 docs/libcurl/libcurl.m4 %{buildroot}%{_datadir}/aclocal/libcurl.m4
|
|
pushd scripts
|
|
make %{?_smp_mflags} DESTDIR=%{buildroot} install
|
|
popd
|
|
|
|
%post -n libcurl4 -p /sbin/ldconfig
|
|
%postun -n libcurl4 -p /sbin/ldconfig
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%doc README RELEASE-NOTES
|
|
%doc docs/{BUGS,FAQ,FEATURES,MANUAL,RESOURCES,TODO,TheArtOfHttpScripting}
|
|
%{_bindir}/curl
|
|
%{_datadir}/zsh/site-functions/_curl
|
|
%{_mandir}/man1/curl.1%{ext_man}
|
|
%dir %{_datadir}/zsh
|
|
%dir %{_datadir}/zsh/site-functions
|
|
|
|
%files -n libcurl4
|
|
%defattr(-,root,root)
|
|
%{_libdir}/libcurl.so.4*
|
|
|
|
%files -n libcurl-devel
|
|
%defattr(-,root,root)
|
|
%{_bindir}/curl-config
|
|
%{_includedir}/curl
|
|
%dir %{_datadir}/aclocal/
|
|
%{_datadir}/aclocal/libcurl.m4
|
|
%{_libdir}/libcurl.so
|
|
%{_libdir}/pkgconfig/libcurl.pc
|
|
%{_mandir}/man1/curl-config.1%{ext_man}
|
|
%{_mandir}/man3/*
|
|
%doc docs/libcurl/symbols-in-versions
|
|
|
|
%changelog
|