Accepting request 1193338 from devel:libraries:c_c++

OBS-URL: https://build.opensuse.org/request/show/1193338
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=201

curl-8.9.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ff09b2791ca56d25fd5c3f3a4927dce7c8a9dc4182200c487ca889fba1fdd412
-size 2781828

curl-8.9.0.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmagncYACgkQXMkI/bce
-EsIf4wf/RVl/4hrfHsntyMCoM/SnY/PZlWommcAnfmSff0OAKV6OvtINkPUAyBdg
-T1PGwkbPOLHB93NBFOm7bjSixbNgRL58gR3Rh+kvMKzx7G2Ug/gpWH3c8JHvwsHw
-S4TCjuVGYsAWDn9/3y3qQNypmUMV8tIWslXoya5F9GtrnJEFItQ1efPPIra9nTtx
-9XRrmB2/EUvPsdKmkztNP8NYaEyYDVPst+1HUv8+UdK5GL1wG8rAp2vPiofvHRDe
-l9AiGu+d9U+UuqO8vNhqc46ii+h4Uj8Sk51mNf88TKAhEdKvPUMEaaySQzu23CKr
-TCyqjvRyY12mEGT0bOX2xIsf0C665g==
-=GGbI
------END PGP SIGNATURE-----

curl-8.9.1.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmap30kACgkQXMkI/bce
+EsKX+wf/brccw5rGTAbmjj7WGBfbAmwrSsDexTXRiEBXT/+qhkWIplN6wdtsZ86I
+tUraaapoyvRKLa3Wxlv9fSF/xXji+5lhO/W9pfWxwZNeSZFiOgKcK/Li4Fx0c7t4
+WpxkAbRvbJreA40BR32qSgnNNjKU5QX/ivf67B1EFL71kgsCW/QczB6mcuxszlkN
+ro39Jb8hDtnAD3hHXrTEaW3lOEgf/Jo/a1Zii3+W3OkW+uZHwzUoqe+HLGHYM2vW
+Q3hBVQaEWmNIwArA73s/kOiFATLthUTvSJO56ebLQJFHJf61cwqSsg2o07i5SqEc
+QlKzV/h7ydbBWdHiSTpCMxue7tLUZw==
+=EiUG
+-----END PGP SIGNATURE-----

curl-sigpipe.patch

@@ -0,0 +1,32 @@
+From 3eec5afbd0b6377eca893c392569b2faf094d970 Mon Sep 17 00:00:00 2001
+From: Daniel Stenberg <daniel@haxx.se>
+Date: Mon, 5 Aug 2024 00:17:17 +0200
+Subject: [PATCH] sigpipe: init the struct so that first apply ignores
+
+Initializes 'no_signal' to TRUE, so that a call to sigpipe_apply() after
+init ignores the signal (unless CURLOPT_NOSIGNAL) is set.
+
+I have read the existing code multiple times now and I think it gets the
+initial state reversed this missing to ignore.
+
+Regression from 17e6f06ea37136c36d27
+
+Reported-by: Rasmus Thomsen
+Fixes #14344
+Closes #14390
+---
+ lib/sigpipe.h | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/lib/sigpipe.h b/lib/sigpipe.h
+index b91a2f51333956..d78afd905d3414 100644
+--- a/lib/sigpipe.h
++++ b/lib/sigpipe.h
+@@ -39,6 +39,7 @@ struct sigpipe_ignore {
+ static void sigpipe_init(struct sigpipe_ignore *ig)
+ {
+   memset(ig, 0, sizeof(*ig));
++  ig->no_signal = TRUE;
+ }
+ 
+ /*

curl.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Mon Aug 12 08:41:26 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Fix regression introduced in version 8.9.1:
+  * sigpipe: init the struct so that first apply ignores
+  * Add curl-sigpipe.patch
+
+-------------------------------------------------------------------
+Wed Jul 31 08:20:44 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 8.9.1:
+  * Security fixes:
+    - curl: ASN.1 date parser overread [bsc#1228535, CVE-2024-7264]
+  * Bugfixes:
+    - cmake: detect 'libssh' via 'pkg-config'
+    - cmake: detect 'nettle' when building with GnuTLS
+    - connect: fix connection shutdown for event based processing
+    - curl: more defensive socket code for --ip-tos
+    - CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
+    - CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
+    - ftpserver.pl: make POP3 LIST serve content from the test file
+    - lib: survive some NULL input args
+    - os400: build cli manual.
+    - os400: workaround an IBM ASCII run-time library bug
+    - transfer: speed limiting fix for 32bit systems
+    - vtls: avoid forward declaration in MultiSSL builds
+    - x509asn1: unittests and fixes for gtime2str
+
 -------------------------------------------------------------------
 Wed Jul 24 07:07:57 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
 

curl.spec

@@ -29,7 +29,7 @@
 %endif
 
 Name:           curl%{?psuffix}
-Version:        8.9.0
+Version:        8.9.1
 Release:        0
 Summary:        A Tool for Transferring Data from URLs
 License:        curl
@@ -43,6 +43,8 @@ Patch1:         dont-mess-with-rpmoptflags.patch
 Patch2:         curl-secure-getenv.patch
 #PATCH-FIX-OPENSUSE bsc#1076446 protocol redirection not supported or disabled
 Patch3:         curl-disabled-redirect-protocol-message.patch
+#PATCH-FIX-UPSTREAM sigpipe: init the struct so that first apply ignores
+Patch4:         curl-sigpipe.patch
 BuildRequires:  groff
 BuildRequires:  libtool
 BuildRequires:  pkgconfig