curl: Update to version 7.71.1

Message ID 20200811081558.25891-1-ummeegge@ipfire.org
State Accepted
Commit 0d1054abc955eb6a0b772fd089d23f8b4af31f9a
Headers
Series curl: Update to version 7.71.1 |

Commit Message

ummeegge Aug. 11, 2020, 8:15 a.m. UTC
  Several bugfixes and vulnerabilities has been fixed since the current available version 7.64.0 .

For a full overview, the changelog is located in here --> https://curl.haxx.se/changes.html,
a security problem overview in here --> https://curl.haxx.se/docs/security.html .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
---
 config/rootfiles/common/curl | 18 +++++++++++++++++-
 lfs/curl                     |  8 ++++----
 2 files changed, 21 insertions(+), 5 deletions(-)
  

Comments

Michael Tremer Aug. 11, 2020, 11:48 a.m. UTC | #1
Oh no. More security issues :)

Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

> On 11 Aug 2020, at 09:15, Erik Kapfer <ummeegge@ipfire.org> wrote:
> 
> Several bugfixes and vulnerabilities has been fixed since the current available version 7.64.0 .
> 
> For a full overview, the changelog is located in here --> https://curl.haxx.se/changes.html,
> a security problem overview in here --> https://curl.haxx.se/docs/security.html .
> 
> Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
> ---
> config/rootfiles/common/curl | 18 +++++++++++++++++-
> lfs/curl                     |  8 ++++----
> 2 files changed, 21 insertions(+), 5 deletions(-)
> 
> diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl
> index 1eb9f6f37..68926a0bb 100644
> --- a/config/rootfiles/common/curl
> +++ b/config/rootfiles/common/curl
> @@ -13,7 +13,7 @@ usr/bin/curl
> #usr/lib/libcurl.la
> #usr/lib/libcurl.so
> usr/lib/libcurl.so.4
> -usr/lib/libcurl.so.4.5.0
> +usr/lib/libcurl.so.4.6.0
> #usr/lib/pkgconfig/libcurl.pc
> #usr/share/aclocal/libcurl.m4
> #usr/share/man/man1/curl-config.1
> @@ -60,6 +60,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLINFO_REDIRECT_URL.3
> #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3
> #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3
> +#usr/share/man/man3/CURLINFO_RETRY_AFTER.3
> #usr/share/man/man3/CURLINFO_RTSP_CLIENT_CSEQ.3
> #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3
> #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3
> @@ -84,6 +85,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3
> #usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3
> #usr/share/man/man3/CURLMOPT_MAXCONNECTS.3
> +#usr/share/man/man3/CURLMOPT_MAX_CONCURRENT_STREAMS.3
> #usr/share/man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3
> #usr/share/man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3
> #usr/share/man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3
> @@ -100,6 +102,8 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3
> #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3
> #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3
> +#usr/share/man/man3/CURLOPT_ALTSVC.3
> +#usr/share/man/man3/CURLOPT_ALTSVC_CTRL.3
> #usr/share/man/man3/CURLOPT_APPEND.3
> #usr/share/man/man3/CURLOPT_AUTOREFERER.3
> #usr/share/man/man3/CURLOPT_BUFFERSIZE.3
> @@ -190,6 +194,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3
> #usr/share/man/man3/CURLOPT_IPRESOLVE.3
> #usr/share/man/man3/CURLOPT_ISSUERCERT.3
> +#usr/share/man/man3/CURLOPT_ISSUERCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3
> #usr/share/man/man3/CURLOPT_KEYPASSWD.3
> #usr/share/man/man3/CURLOPT_KRBLEVEL.3
> @@ -201,6 +206,8 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_MAIL_AUTH.3
> #usr/share/man/man3/CURLOPT_MAIL_FROM.3
> #usr/share/man/man3/CURLOPT_MAIL_RCPT.3
> +#usr/share/man/man3/CURLOPT_MAIL_RCPT_ALLLOWFAILS.3
> +#usr/share/man/man3/CURLOPT_MAXAGE_CONN.3
> #usr/share/man/man3/CURLOPT_MAXCONNECTS.3
> #usr/share/man/man3/CURLOPT_MAXFILESIZE.3
> #usr/share/man/man3/CURLOPT_MAXFILESIZE_LARGE.3
> @@ -246,13 +253,17 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_PROXY_CAINFO.3
> #usr/share/man/man3/CURLOPT_PROXY_CAPATH.3
> #usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3
> +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT.3
> +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3
> #usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3
> #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3
> +#usr/share/man/man3/CURLOPT_PROXY_SSLCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3
> +#usr/share/man/man3/CURLOPT_PROXY_SSLKEY_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3
> #usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3
> #usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3
> @@ -283,6 +294,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_RTSP_SESSION_ID.3
> #usr/share/man/man3/CURLOPT_RTSP_STREAM_URI.3
> #usr/share/man/man3/CURLOPT_RTSP_TRANSPORT.3
> +#usr/share/man/man3/CURLOPT_SASL_AUTHZID.3
> #usr/share/man/man3/CURLOPT_SASL_IR.3
> #usr/share/man/man3/CURLOPT_SEEKDATA.3
> #usr/share/man/man3/CURLOPT_SEEKFUNCTION.3
> @@ -303,10 +315,12 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_SSH_PUBLIC_KEYFILE.3
> #usr/share/man/man3/CURLOPT_SSLCERT.3
> #usr/share/man/man3/CURLOPT_SSLCERTTYPE.3
> +#usr/share/man/man3/CURLOPT_SSLCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_SSLENGINE.3
> #usr/share/man/man3/CURLOPT_SSLENGINE_DEFAULT.3
> #usr/share/man/man3/CURLOPT_SSLKEY.3
> #usr/share/man/man3/CURLOPT_SSLKEYTYPE.3
> +#usr/share/man/man3/CURLOPT_SSLKEY_BLOB.3
> #usr/share/man/man3/CURLOPT_SSLVERSION.3
> #usr/share/man/man3/CURLOPT_SSL_CIPHER_LIST.3
> #usr/share/man/man3/CURLOPT_SSL_CTX_DATA.3
> @@ -407,6 +421,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/curl_multi_info_read.3
> #usr/share/man/man3/curl_multi_init.3
> #usr/share/man/man3/curl_multi_perform.3
> +#usr/share/man/man3/curl_multi_poll.3
> #usr/share/man/man3/curl_multi_remove_handle.3
> #usr/share/man/man3/curl_multi_setopt.3
> #usr/share/man/man3/curl_multi_socket.3
> @@ -415,6 +430,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/curl_multi_strerror.3
> #usr/share/man/man3/curl_multi_timeout.3
> #usr/share/man/man3/curl_multi_wait.3
> +#usr/share/man/man3/curl_multi_wakeup.3
> #usr/share/man/man3/curl_share_cleanup.3
> #usr/share/man/man3/curl_share_init.3
> #usr/share/man/man3/curl_share_setopt.3
> diff --git a/lfs/curl b/lfs/curl
> index e57bbbf45..34dfe90e8 100644
> --- a/lfs/curl
> +++ b/lfs/curl
> @@ -1,7 +1,7 @@
> ###############################################################################
> #                                                                             #
> # IPFire.org - A linux based firewall                                         #
> -# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
> +# Copyright (C) 2007-2020  IPFire Team  <info@ipfire.org>                     #
> #                                                                             #
> # This program is free software: you can redistribute it and/or modify        #
> # it under the terms of the GNU General Public License as published by        #
> @@ -24,10 +24,10 @@
> 
> include Config
> 
> -VER        = 7.64.0
> +VER        = 7.71.1
> 
> THISAPP    = curl-$(VER)
> -DL_FILE    = $(THISAPP).tar.gz
> +DL_FILE    = $(THISAPP).tar.xz
> DL_FROM    = $(URL_IPFIRE)
> DIR_APP    = $(DIR_SRC)/$(THISAPP)
> TARGET     = $(DIR_INFO)/$(THISAPP)
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
> 
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
> 
> -$(DL_FILE)_MD5 = a026740d599a32bcbbe6e70679397899
> +$(DL_FILE)_MD5 = b54b386057846ce3edd3584b19741569
> 
> install : $(TARGET)
> 
> -- 
> 2.20.1
>
  

Patch

diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl
index 1eb9f6f37..68926a0bb 100644
--- a/config/rootfiles/common/curl
+++ b/config/rootfiles/common/curl
@@ -13,7 +13,7 @@  usr/bin/curl
 #usr/lib/libcurl.la
 #usr/lib/libcurl.so
 usr/lib/libcurl.so.4
-usr/lib/libcurl.so.4.5.0
+usr/lib/libcurl.so.4.6.0
 #usr/lib/pkgconfig/libcurl.pc
 #usr/share/aclocal/libcurl.m4
 #usr/share/man/man1/curl-config.1
@@ -60,6 +60,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLINFO_REDIRECT_URL.3
 #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3
 #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3
+#usr/share/man/man3/CURLINFO_RETRY_AFTER.3
 #usr/share/man/man3/CURLINFO_RTSP_CLIENT_CSEQ.3
 #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3
 #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3
@@ -84,6 +85,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3
 #usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3
 #usr/share/man/man3/CURLMOPT_MAXCONNECTS.3
+#usr/share/man/man3/CURLMOPT_MAX_CONCURRENT_STREAMS.3
 #usr/share/man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3
 #usr/share/man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3
 #usr/share/man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3
@@ -100,6 +102,8 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3
 #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3
 #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3
+#usr/share/man/man3/CURLOPT_ALTSVC.3
+#usr/share/man/man3/CURLOPT_ALTSVC_CTRL.3
 #usr/share/man/man3/CURLOPT_APPEND.3
 #usr/share/man/man3/CURLOPT_AUTOREFERER.3
 #usr/share/man/man3/CURLOPT_BUFFERSIZE.3
@@ -190,6 +194,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3
 #usr/share/man/man3/CURLOPT_IPRESOLVE.3
 #usr/share/man/man3/CURLOPT_ISSUERCERT.3
+#usr/share/man/man3/CURLOPT_ISSUERCERT_BLOB.3
 #usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3
 #usr/share/man/man3/CURLOPT_KEYPASSWD.3
 #usr/share/man/man3/CURLOPT_KRBLEVEL.3
@@ -201,6 +206,8 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_MAIL_AUTH.3
 #usr/share/man/man3/CURLOPT_MAIL_FROM.3
 #usr/share/man/man3/CURLOPT_MAIL_RCPT.3
+#usr/share/man/man3/CURLOPT_MAIL_RCPT_ALLLOWFAILS.3
+#usr/share/man/man3/CURLOPT_MAXAGE_CONN.3
 #usr/share/man/man3/CURLOPT_MAXCONNECTS.3
 #usr/share/man/man3/CURLOPT_MAXFILESIZE.3
 #usr/share/man/man3/CURLOPT_MAXFILESIZE_LARGE.3
@@ -246,13 +253,17 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_PROXY_CAINFO.3
 #usr/share/man/man3/CURLOPT_PROXY_CAPATH.3
 #usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3
+#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT.3
+#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT_BLOB.3
 #usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3
 #usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3
 #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3
 #usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3
 #usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3
+#usr/share/man/man3/CURLOPT_PROXY_SSLCERT_BLOB.3
 #usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3
 #usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3
+#usr/share/man/man3/CURLOPT_PROXY_SSLKEY_BLOB.3
 #usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3
 #usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3
 #usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3
@@ -283,6 +294,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_RTSP_SESSION_ID.3
 #usr/share/man/man3/CURLOPT_RTSP_STREAM_URI.3
 #usr/share/man/man3/CURLOPT_RTSP_TRANSPORT.3
+#usr/share/man/man3/CURLOPT_SASL_AUTHZID.3
 #usr/share/man/man3/CURLOPT_SASL_IR.3
 #usr/share/man/man3/CURLOPT_SEEKDATA.3
 #usr/share/man/man3/CURLOPT_SEEKFUNCTION.3
@@ -303,10 +315,12 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/CURLOPT_SSH_PUBLIC_KEYFILE.3
 #usr/share/man/man3/CURLOPT_SSLCERT.3
 #usr/share/man/man3/CURLOPT_SSLCERTTYPE.3
+#usr/share/man/man3/CURLOPT_SSLCERT_BLOB.3
 #usr/share/man/man3/CURLOPT_SSLENGINE.3
 #usr/share/man/man3/CURLOPT_SSLENGINE_DEFAULT.3
 #usr/share/man/man3/CURLOPT_SSLKEY.3
 #usr/share/man/man3/CURLOPT_SSLKEYTYPE.3
+#usr/share/man/man3/CURLOPT_SSLKEY_BLOB.3
 #usr/share/man/man3/CURLOPT_SSLVERSION.3
 #usr/share/man/man3/CURLOPT_SSL_CIPHER_LIST.3
 #usr/share/man/man3/CURLOPT_SSL_CTX_DATA.3
@@ -407,6 +421,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/curl_multi_info_read.3
 #usr/share/man/man3/curl_multi_init.3
 #usr/share/man/man3/curl_multi_perform.3
+#usr/share/man/man3/curl_multi_poll.3
 #usr/share/man/man3/curl_multi_remove_handle.3
 #usr/share/man/man3/curl_multi_setopt.3
 #usr/share/man/man3/curl_multi_socket.3
@@ -415,6 +430,7 @@  usr/lib/libcurl.so.4.5.0
 #usr/share/man/man3/curl_multi_strerror.3
 #usr/share/man/man3/curl_multi_timeout.3
 #usr/share/man/man3/curl_multi_wait.3
+#usr/share/man/man3/curl_multi_wakeup.3
 #usr/share/man/man3/curl_share_cleanup.3
 #usr/share/man/man3/curl_share_init.3
 #usr/share/man/man3/curl_share_setopt.3
diff --git a/lfs/curl b/lfs/curl
index e57bbbf45..34dfe90e8 100644
--- a/lfs/curl
+++ b/lfs/curl
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2020  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,10 +24,10 @@ 
 
 include Config
 
-VER        = 7.64.0
+VER        = 7.71.1
 
 THISAPP    = curl-$(VER)
-DL_FILE    = $(THISAPP).tar.gz
+DL_FILE    = $(THISAPP).tar.xz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = a026740d599a32bcbbe6e70679397899
+$(DL_FILE)_MD5 = b54b386057846ce3edd3584b19741569
 
 install : $(TARGET)