2006-12-18 13:07:10 +00:00
|
|
|
Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
|
2008-03-31 07:47:59 +00:00
|
|
|
Name: curl
|
2024-02-01 12:07:37 +00:00
|
|
|
Version: 8.6.0
|
2024-02-06 14:25:02 +00:00
|
|
|
Release: 4%{?dist}
|
2023-03-21 14:46:58 +00:00
|
|
|
License: curl
|
2021-07-09 18:41:33 +00:00
|
|
|
Source0: https://curl.se/download/%{name}-%{version}.tar.xz
|
|
|
|
|
Source1: https://curl.se/download/%{name}-%{version}.tar.xz.asc
|
|
|
|
|
# The curl download page ( https://curl.se/download.html ) links
|
|
|
|
|
# to Daniel's address page https://daniel.haxx.se/address.html for the GPG Key,
|
|
|
|
|
# which points to the GPG key as of April 7th 2016 of https://daniel.haxx.se/mykey.asc
|
|
|
|
|
Source2: mykey.asc
|
2016-11-21 08:54:16 +00:00
|
|
|
|
2024-02-01 12:07:37 +00:00
|
|
|
# remove duplicate content from curl-config.1
|
|
|
|
|
Patch001: 0001-curl-8.6.0-remove-duplicate-content.patch
|
2023-12-06 07:50:13 +00:00
|
|
|
|
2024-02-05 09:49:10 +00:00
|
|
|
# ignore response bode to HEAD requests
|
|
|
|
|
# https://bodhi.fedoraproject.org/updates/FEDORA-2024-634a6662aa
|
|
|
|
|
Patch002: 0002-curl-8.6.0-ignore-response-body-to-HEAD.patch
|
|
|
|
|
|
2010-04-21 19:09:46 +00:00
|
|
|
# patch making libcurl multilib ready
|
2013-08-12 11:50:13 +00:00
|
|
|
Patch101: 0101-curl-7.32.0-multilib.patch
|
2010-02-11 11:31:31 +00:00
|
|
|
|
2022-06-27 15:00:18 +00:00
|
|
|
# test3026: disable valgrind
|
|
|
|
|
Patch102: 0102-curl-7.84.0-test3026.patch
|
|
|
|
|
|
2023-02-15 09:46:00 +00:00
|
|
|
# do not fail on warnings in the upstream test driver
|
|
|
|
|
Patch104: 0104-curl-7.88.0-tests-warnings.patch
|
|
|
|
|
|
2017-05-16 11:24:33 +00:00
|
|
|
Provides: curl-full = %{version}-%{release}
|
2007-09-10 07:12:49 +00:00
|
|
|
Provides: webclient
|
2020-11-09 12:31:52 +00:00
|
|
|
URL: https://curl.se/
|
2024-02-06 14:25:02 +00:00
|
|
|
|
|
|
|
|
# The reason for maintaining two separate packages for curl is no longer valid.
|
|
|
|
|
# The curl-minimal is currently almost identical to curl-full, so let's drop curl-minimal.
|
|
|
|
|
# For more details, see https://bugzilla.redhat.com/show_bug.cgi?id=2262096
|
|
|
|
|
Obsoletes: curl-minimal < 8.6.0-4
|
|
|
|
|
|
2018-08-15 11:56:12 +00:00
|
|
|
BuildRequires: automake
|
2018-07-10 11:51:08 +00:00
|
|
|
BuildRequires: brotli-devel
|
2018-02-19 10:09:14 +00:00
|
|
|
BuildRequires: coreutils
|
|
|
|
|
BuildRequires: gcc
|
2009-07-02 14:37:19 +00:00
|
|
|
BuildRequires: groff
|
2009-09-26 07:54:44 +00:00
|
|
|
BuildRequires: krb5-devel
|
2016-11-02 09:26:24 +00:00
|
|
|
BuildRequires: libidn2-devel
|
2015-06-30 16:21:57 +00:00
|
|
|
BuildRequires: libnghttp2-devel
|
2016-02-10 17:54:34 +00:00
|
|
|
BuildRequires: libpsl-devel
|
2018-01-24 15:24:30 +00:00
|
|
|
BuildRequires: libssh-devel
|
2020-04-29 07:51:03 +00:00
|
|
|
BuildRequires: libtool
|
2018-02-19 10:09:14 +00:00
|
|
|
BuildRequires: make
|
2009-09-26 07:54:44 +00:00
|
|
|
BuildRequires: openldap-devel
|
2009-12-08 09:41:10 +00:00
|
|
|
BuildRequires: openssh-clients
|
|
|
|
|
BuildRequires: openssh-server
|
2017-04-27 08:42:34 +00:00
|
|
|
BuildRequires: openssl-devel
|
2019-04-05 12:38:15 +00:00
|
|
|
BuildRequires: perl-interpreter
|
2009-09-26 07:54:44 +00:00
|
|
|
BuildRequires: pkgconfig
|
2020-12-09 17:51:40 +00:00
|
|
|
BuildRequires: python-unversioned-command
|
2018-07-04 13:07:32 +00:00
|
|
|
BuildRequires: python3-devel
|
2018-02-19 10:09:14 +00:00
|
|
|
BuildRequires: sed
|
2010-09-11 21:39:36 +00:00
|
|
|
BuildRequires: zlib-devel
|
|
|
|
|
|
2021-07-09 18:41:33 +00:00
|
|
|
# For gpg verification of source tarball
|
|
|
|
|
BuildRequires: gnupg2
|
|
|
|
|
|
2018-10-08 11:45:20 +00:00
|
|
|
# needed to compress content of tool_hugehelp.c after changing curl.1 man page
|
|
|
|
|
BuildRequires: perl(IO::Compress::Gzip)
|
|
|
|
|
|
2019-04-05 12:38:15 +00:00
|
|
|
# needed for generation of shell completions
|
|
|
|
|
BuildRequires: perl(Getopt::Long)
|
|
|
|
|
BuildRequires: perl(Pod::Usage)
|
|
|
|
|
BuildRequires: perl(strict)
|
|
|
|
|
BuildRequires: perl(warnings)
|
|
|
|
|
|
2023-02-15 11:53:26 +00:00
|
|
|
# needed for test1560 to succeed
|
|
|
|
|
BuildRequires: glibc-langpack-en
|
|
|
|
|
|
2017-08-09 11:42:41 +00:00
|
|
|
# gnutls-serv is used by the upstream test-suite
|
|
|
|
|
BuildRequires: gnutls-utils
|
|
|
|
|
|
2020-05-02 08:07:26 +00:00
|
|
|
# hostname(1) is used by the test-suite but it is missing in armv7hl buildroot
|
|
|
|
|
BuildRequires: hostname
|
|
|
|
|
|
2016-07-21 12:02:22 +00:00
|
|
|
# nghttpx (an HTTP/2 proxy) is used by the upstream test-suite
|
|
|
|
|
BuildRequires: nghttp2
|
|
|
|
|
|
2014-03-17 18:33:01 +00:00
|
|
|
# perl modules used in the test suite
|
2023-05-17 12:14:43 +00:00
|
|
|
BuildRequires: perl(B)
|
2023-05-17 10:11:00 +00:00
|
|
|
BuildRequires: perl(base)
|
2023-05-17 12:14:43 +00:00
|
|
|
BuildRequires: perl(constant)
|
2014-03-17 18:33:01 +00:00
|
|
|
BuildRequires: perl(Cwd)
|
|
|
|
|
BuildRequires: perl(Digest::MD5)
|
2021-11-14 17:06:12 +00:00
|
|
|
BuildRequires: perl(Digest::SHA)
|
2014-03-17 18:33:01 +00:00
|
|
|
BuildRequires: perl(Exporter)
|
|
|
|
|
BuildRequires: perl(File::Basename)
|
|
|
|
|
BuildRequires: perl(File::Copy)
|
|
|
|
|
BuildRequires: perl(File::Spec)
|
|
|
|
|
BuildRequires: perl(IPC::Open2)
|
2023-05-17 12:14:43 +00:00
|
|
|
BuildRequires: perl(List::Util)
|
2023-05-17 07:28:55 +00:00
|
|
|
BuildRequires: perl(Memoize)
|
2014-03-17 18:33:01 +00:00
|
|
|
BuildRequires: perl(MIME::Base64)
|
2023-05-17 12:14:43 +00:00
|
|
|
BuildRequires: perl(POSIX)
|
|
|
|
|
BuildRequires: perl(Storable)
|
2014-03-17 18:33:01 +00:00
|
|
|
BuildRequires: perl(Time::HiRes)
|
2023-05-17 12:14:43 +00:00
|
|
|
BuildRequires: perl(Time::Local)
|
2014-03-17 18:33:01 +00:00
|
|
|
BuildRequires: perl(vars)
|
2014-03-17 14:22:14 +00:00
|
|
|
|
2021-02-23 21:00:29 +00:00
|
|
|
%if 0%{?fedora}
|
2020-10-14 09:10:34 +00:00
|
|
|
# needed for upstream test 1451
|
|
|
|
|
BuildRequires: python3-impacket
|
2021-02-23 21:00:29 +00:00
|
|
|
%endif
|
2020-10-14 09:10:34 +00:00
|
|
|
|
2017-04-13 10:59:46 +00:00
|
|
|
# The test-suite runs automatically through valgrind if valgrind is available
|
2015-08-27 14:06:46 +00:00
|
|
|
# on the system. By not installing valgrind into mock's chroot, we disable
|
|
|
|
|
# this feature for production builds on architectures where valgrind is known
|
|
|
|
|
# to be less reliable, in order to avoid unnecessary build failures (see RHBZ
|
|
|
|
|
# #810992, #816175, and #886891). Nevertheless developers are free to install
|
|
|
|
|
# valgrind manually to improve test coverage on any architecture.
|
2019-11-15 09:37:39 +00:00
|
|
|
%ifarch x86_64
|
2018-07-04 13:12:27 +00:00
|
|
|
BuildRequires: valgrind
|
2010-04-20 11:31:55 +00:00
|
|
|
%endif
|
2009-12-01 12:26:26 +00:00
|
|
|
|
2021-01-26 14:13:50 +00:00
|
|
|
# stunnel is used by upstream tests but it does not seem to work reliably
|
2022-12-21 15:42:54 +00:00
|
|
|
# on aarch64/s390x and occasionally breaks some tests (mainly 1561 and 1562)
|
|
|
|
|
%ifnarch aarch64 s390x
|
2021-01-26 14:13:50 +00:00
|
|
|
BuildRequires: stunnel
|
|
|
|
|
%endif
|
|
|
|
|
|
2024-02-06 14:25:02 +00:00
|
|
|
# Suggest minimal version of libcurl to to keep number of dependencies low
|
|
|
|
|
# after dropping curl-minimal.
|
|
|
|
|
Suggests: libcurl-minimal
|
|
|
|
|
|
2017-05-04 10:42:41 +00:00
|
|
|
# using an older version of libcurl could result in CURLE_UNKNOWN_OPTION
|
|
|
|
|
Requires: libcurl%{?_isa} >= %{version}-%{release}
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2022-11-24 15:25:47 +00:00
|
|
|
# require at least the version of libnghttp2 that we were built against,
|
|
|
|
|
# to ensure that we have the necessary symbols available (#2144277)
|
|
|
|
|
%global libnghttp2_version %(pkg-config --modversion libnghttp2 2>/dev/null || echo 0)
|
|
|
|
|
|
2018-10-05 11:59:35 +00:00
|
|
|
# require at least the version of libpsl that we were built against,
|
|
|
|
|
# to ensure that we have the necessary symbols available (#1631804)
|
|
|
|
|
%global libpsl_version %(pkg-config --modversion libpsl 2>/dev/null || echo 0)
|
|
|
|
|
|
2018-02-15 09:52:27 +00:00
|
|
|
# require at least the version of libssh that we were built against,
|
|
|
|
|
# to ensure that we have the necessary symbols available (#525002, #642796)
|
|
|
|
|
%global libssh_version %(pkg-config --modversion libssh 2>/dev/null || echo 0)
|
|
|
|
|
|
2017-06-19 11:28:00 +00:00
|
|
|
# require at least the version of openssl-libs that we were built against,
|
|
|
|
|
# to ensure that we have the necessary symbols available (#1462184, #1462211)
|
2021-07-23 15:14:53 +00:00
|
|
|
# (we need to translate 3.0.0-alpha16 -> 3.0.0-0.alpha16 and 3.0.0-beta1 -> 3.0.0-0.beta1 though)
|
|
|
|
|
%global openssl_version %({ pkg-config --modversion openssl 2>/dev/null || echo 0;} | sed 's|-|-0.|')
|
2017-06-19 11:28:00 +00:00
|
|
|
|
2008-03-31 07:47:59 +00:00
|
|
|
%description
|
2010-06-16 13:51:10 +00:00
|
|
|
curl is a command line tool for transferring data with URL syntax, supporting
|
|
|
|
|
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,
|
|
|
|
|
SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP
|
|
|
|
|
uploading, HTTP form based upload, proxies, cookies, user+password
|
|
|
|
|
authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer
|
|
|
|
|
resume, proxy tunneling and a busload of other useful tricks.
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2007-10-24 14:15:06 +00:00
|
|
|
%package -n libcurl
|
|
|
|
|
Summary: A library for getting files from web servers
|
2022-11-24 15:25:47 +00:00
|
|
|
Requires: libnghttp2%{?_isa} >= %{libnghttp2_version}
|
2018-10-05 11:59:35 +00:00
|
|
|
Requires: libpsl%{?_isa} >= %{libpsl_version}
|
2018-02-15 09:52:27 +00:00
|
|
|
Requires: libssh%{?_isa} >= %{libssh_version}
|
2017-06-19 11:28:00 +00:00
|
|
|
Requires: openssl-libs%{?_isa} >= 1:%{openssl_version}
|
2017-05-16 11:24:33 +00:00
|
|
|
Provides: libcurl-full = %{version}-%{release}
|
|
|
|
|
Provides: libcurl-full%{?_isa} = %{version}-%{release}
|
2007-10-24 14:15:06 +00:00
|
|
|
|
|
|
|
|
%description -n libcurl
|
2010-06-16 13:51:10 +00:00
|
|
|
libcurl is a free and easy-to-use client-side URL transfer library, supporting
|
|
|
|
|
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,
|
|
|
|
|
SMTP, POP3 and RTSP. libcurl supports SSL certificates, HTTP POST, HTTP PUT,
|
|
|
|
|
FTP uploading, HTTP form based upload, proxies, cookies, user+password
|
|
|
|
|
authentication (Basic, Digest, NTLM, Negotiate, Kerberos4), file transfer
|
|
|
|
|
resume, http proxy tunneling and more.
|
2007-10-24 14:15:06 +00:00
|
|
|
|
|
|
|
|
%package -n libcurl-devel
|
2007-02-05 14:14:27 +00:00
|
|
|
Summary: Files needed for building applications with libcurl
|
2014-08-13 13:15:17 +00:00
|
|
|
Requires: libcurl%{?_isa} = %{version}-%{release}
|
2010-08-24 22:03:39 +00:00
|
|
|
|
2007-10-24 22:02:12 +00:00
|
|
|
Provides: curl-devel = %{version}-%{release}
|
2014-08-13 13:15:17 +00:00
|
|
|
Provides: curl-devel%{?_isa} = %{version}-%{release}
|
2008-01-22 12:00:06 +00:00
|
|
|
Obsoletes: curl-devel < %{version}-%{release}
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2007-10-24 14:15:06 +00:00
|
|
|
%description -n libcurl-devel
|
2010-06-16 13:51:10 +00:00
|
|
|
The libcurl-devel package includes header files and libraries necessary for
|
|
|
|
|
developing programs which use the libcurl library. It contains the API
|
|
|
|
|
documentation of the library, too.
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2016-02-10 19:37:11 +00:00
|
|
|
%package -n libcurl-minimal
|
2017-04-13 10:59:46 +00:00
|
|
|
Summary: Conservatively configured build of libcurl for minimal installations
|
2022-11-24 15:25:47 +00:00
|
|
|
Requires: libnghttp2%{?_isa} >= %{libnghttp2_version}
|
2017-06-19 11:28:00 +00:00
|
|
|
Requires: openssl-libs%{?_isa} >= 1:%{openssl_version}
|
2017-04-13 10:59:46 +00:00
|
|
|
Provides: libcurl = %{version}-%{release}
|
2016-02-10 19:37:11 +00:00
|
|
|
Provides: libcurl%{?_isa} = %{version}-%{release}
|
2020-09-10 07:17:00 +00:00
|
|
|
Conflicts: libcurl%{?_isa}
|
2016-02-10 19:37:11 +00:00
|
|
|
RemovePathPostfixes: .minimal
|
2018-01-31 13:41:00 +00:00
|
|
|
# needed for RemovePathPostfixes to work with shared libraries
|
|
|
|
|
%undefine __brp_ldconfig
|
2016-02-10 19:37:11 +00:00
|
|
|
|
|
|
|
|
%description -n libcurl-minimal
|
|
|
|
|
This is a replacement of the 'libcurl' package for minimal installations. It
|
|
|
|
|
comes with a limited set of features compared to the 'libcurl' package. On the
|
|
|
|
|
other hand, the package is smaller and requires fewer run-time dependencies to
|
|
|
|
|
be installed.
|
|
|
|
|
|
2004-09-09 04:00:18 +00:00
|
|
|
%prep
|
2021-07-09 18:41:33 +00:00
|
|
|
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
2023-04-21 12:32:13 +00:00
|
|
|
%autosetup -p1
|
2010-02-24 20:43:45 +00:00
|
|
|
|
2023-04-21 16:01:25 +00:00
|
|
|
# disable test 1801
|
2015-07-17 14:36:36 +00:00
|
|
|
# <https://github.com/bagder/curl/commit/21e82bd6#commitcomment-12226582>
|
2023-04-21 16:01:25 +00:00
|
|
|
echo "1801" >> tests/data/DISABLED
|
2021-10-27 11:23:58 +00:00
|
|
|
|
2022-06-28 07:04:19 +00:00
|
|
|
# test3026: avoid pthread_create() failure due to resource exhaustion on i386
|
|
|
|
|
%ifarch %{ix86}
|
|
|
|
|
sed -e 's|NUM_THREADS 1000$|NUM_THREADS 256|' \
|
|
|
|
|
-i tests/libtest/lib3026.c
|
|
|
|
|
%endif
|
|
|
|
|
|
2018-07-31 08:33:53 +00:00
|
|
|
# adapt test 323 for updated OpenSSL
|
2021-03-31 08:17:37 +00:00
|
|
|
sed -e 's|^35$|35,52|' -i tests/data/test323
|
|
|
|
|
|
|
|
|
|
# use localhost6 instead of ip6-localhost in the curl test-suite
|
|
|
|
|
(
|
|
|
|
|
# avoid glob expansion in the trace output of `bash -x`
|
|
|
|
|
{ set +x; } 2>/dev/null
|
|
|
|
|
cmd="sed -e 's|ip6-localhost|localhost6|' -i tests/data/test[0-9]*"
|
|
|
|
|
printf "+ %s\n" "$cmd" >&2
|
|
|
|
|
eval "$cmd"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
# regenerate the configure script and Makefile.in files
|
|
|
|
|
autoreconf -fiv
|
2018-07-31 08:33:53 +00:00
|
|
|
|
2005-04-25 15:09:40 +00:00
|
|
|
%build
|
2016-02-10 19:37:11 +00:00
|
|
|
mkdir build-{full,minimal}
|
2021-09-20 12:47:47 +00:00
|
|
|
export common_configure_opts=" \
|
|
|
|
|
--cache-file=../config.cache \
|
2024-02-02 11:01:47 +00:00
|
|
|
--disable-manual \
|
2021-09-20 12:47:47 +00:00
|
|
|
--disable-static \
|
2021-10-26 15:15:50 +00:00
|
|
|
--enable-hsts \
|
2021-09-20 12:47:47 +00:00
|
|
|
--enable-ipv6 \
|
2021-10-26 15:15:50 +00:00
|
|
|
--enable-symbol-hiding \
|
2021-09-20 12:47:47 +00:00
|
|
|
--enable-threaded-resolver \
|
2021-09-20 12:48:51 +00:00
|
|
|
--without-zstd \
|
2021-09-20 12:47:47 +00:00
|
|
|
--with-gssapi \
|
2022-02-24 08:41:36 +00:00
|
|
|
--with-libidn2 \
|
2021-09-20 12:47:47 +00:00
|
|
|
--with-nghttp2 \
|
2017-04-27 08:42:34 +00:00
|
|
|
--with-ssl --with-ca-bundle=%{_sysconfdir}/pki/tls/certs/ca-bundle.crt"
|
2016-02-10 19:37:11 +00:00
|
|
|
|
|
|
|
|
%global _configure ../configure
|
|
|
|
|
|
|
|
|
|
# configure minimal build
|
|
|
|
|
(
|
|
|
|
|
cd build-minimal
|
2021-09-20 12:47:47 +00:00
|
|
|
%configure $common_configure_opts \
|
2021-09-20 12:54:20 +00:00
|
|
|
--disable-dict \
|
|
|
|
|
--disable-gopher \
|
|
|
|
|
--disable-imap \
|
2021-09-20 12:47:47 +00:00
|
|
|
--disable-ldap \
|
|
|
|
|
--disable-ldaps \
|
2021-09-20 12:54:20 +00:00
|
|
|
--disable-mqtt \
|
|
|
|
|
--disable-ntlm \
|
|
|
|
|
--disable-ntlm-wb \
|
|
|
|
|
--disable-pop3 \
|
|
|
|
|
--disable-rtsp \
|
|
|
|
|
--disable-smb \
|
|
|
|
|
--disable-smtp \
|
|
|
|
|
--disable-telnet \
|
|
|
|
|
--disable-tftp \
|
|
|
|
|
--disable-tls-srp \
|
2023-08-02 12:36:11 +00:00
|
|
|
--disable-websockets \
|
2021-09-20 12:47:47 +00:00
|
|
|
--without-brotli \
|
|
|
|
|
--without-libpsl \
|
2018-01-24 15:24:30 +00:00
|
|
|
--without-libssh
|
2016-02-10 19:37:11 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
|
|
# configure full build
|
|
|
|
|
(
|
|
|
|
|
cd build-full
|
2021-09-20 12:47:47 +00:00
|
|
|
%configure $common_configure_opts \
|
2021-09-20 12:54:20 +00:00
|
|
|
--enable-dict \
|
|
|
|
|
--enable-gopher \
|
|
|
|
|
--enable-imap \
|
2021-09-20 12:47:47 +00:00
|
|
|
--enable-ldap \
|
|
|
|
|
--enable-ldaps \
|
2021-09-20 12:54:20 +00:00
|
|
|
--enable-mqtt \
|
|
|
|
|
--enable-ntlm \
|
|
|
|
|
--enable-ntlm-wb \
|
|
|
|
|
--enable-pop3 \
|
|
|
|
|
--enable-rtsp \
|
|
|
|
|
--enable-smb \
|
|
|
|
|
--enable-smtp \
|
|
|
|
|
--enable-telnet \
|
|
|
|
|
--enable-tftp \
|
|
|
|
|
--enable-tls-srp \
|
2023-08-02 12:36:11 +00:00
|
|
|
--enable-websockets \
|
2021-09-20 12:47:47 +00:00
|
|
|
--with-brotli \
|
|
|
|
|
--with-libpsl \
|
2018-01-24 15:24:30 +00:00
|
|
|
--with-libssh
|
2016-02-10 19:37:11 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
|
|
# avoid using rpath
|
|
|
|
|
sed -e 's/^runpath_var=.*/runpath_var=/' \
|
|
|
|
|
-e 's/^hardcode_libdir_flag_spec=".*"$/hardcode_libdir_flag_spec=""/' \
|
|
|
|
|
-i build-{full,minimal}/libtool
|
|
|
|
|
|
2020-07-13 19:00:01 +00:00
|
|
|
%make_build V=1 -C build-minimal
|
|
|
|
|
%make_build V=1 -C build-full
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2009-07-02 14:37:19 +00:00
|
|
|
%check
|
2015-12-02 12:17:27 +00:00
|
|
|
# compile upstream test-cases
|
2021-09-20 13:04:37 +00:00
|
|
|
%make_build V=1 -C build-minimal/tests
|
|
|
|
|
%make_build V=1 -C build-full/tests
|
2009-12-09 17:48:00 +00:00
|
|
|
|
2018-08-07 14:56:26 +00:00
|
|
|
# relax crypto policy for the test-suite to make it pass again (#1610888)
|
|
|
|
|
export OPENSSL_SYSTEM_CIPHERS_OVERRIDE=XXX
|
|
|
|
|
export OPENSSL_CONF=
|
|
|
|
|
|
2021-09-20 13:04:37 +00:00
|
|
|
# make runtests.pl work for out-of-tree builds
|
|
|
|
|
export srcdir=../../tests
|
|
|
|
|
|
2021-07-21 10:36:07 +00:00
|
|
|
# prevent valgrind from being extremely slow (#1662656)
|
|
|
|
|
# https://fedoraproject.org/wiki/Changes/DebuginfodByDefault
|
|
|
|
|
unset DEBUGINFOD_URLS
|
|
|
|
|
|
2021-09-20 13:04:37 +00:00
|
|
|
# run the upstream test-suite for both curl-minimal and curl-full
|
|
|
|
|
for size in minimal full; do (
|
|
|
|
|
cd build-${size}
|
|
|
|
|
|
|
|
|
|
# we have to override LD_LIBRARY_PATH because we eliminated rpath
|
|
|
|
|
export LD_LIBRARY_PATH="${PWD}/lib/.libs"
|
|
|
|
|
|
|
|
|
|
cd tests
|
|
|
|
|
perl -I../../tests ../../tests/runtests.pl -a -p -v '!flaky'
|
|
|
|
|
)
|
|
|
|
|
done
|
|
|
|
|
|
2009-07-02 14:37:19 +00:00
|
|
|
|
2004-09-09 04:00:18 +00:00
|
|
|
%install
|
2016-02-10 19:37:11 +00:00
|
|
|
# install and rename the library that will be packaged as libcurl-minimal
|
2020-07-13 19:00:01 +00:00
|
|
|
%make_install -C build-minimal/lib
|
2016-02-10 19:37:11 +00:00
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.{la,so}
|
|
|
|
|
for i in ${RPM_BUILD_ROOT}%{_libdir}/*; do
|
|
|
|
|
mv -v $i $i.minimal
|
|
|
|
|
done
|
|
|
|
|
|
2017-08-09 09:43:42 +00:00
|
|
|
# install libcurl.m4
|
|
|
|
|
install -d $RPM_BUILD_ROOT%{_datadir}/aclocal
|
|
|
|
|
install -m 644 docs/libcurl/libcurl.m4 $RPM_BUILD_ROOT%{_datadir}/aclocal
|
|
|
|
|
|
2016-02-10 19:37:11 +00:00
|
|
|
# install the executable and library that will be packaged as curl and libcurl
|
2017-08-09 09:43:42 +00:00
|
|
|
cd build-full
|
2020-07-13 19:00:01 +00:00
|
|
|
%make_install
|
2017-08-09 09:43:42 +00:00
|
|
|
|
2016-05-18 12:42:22 +00:00
|
|
|
# install zsh completion for curl
|
2016-10-07 10:22:22 +00:00
|
|
|
# (we have to override LD_LIBRARY_PATH because we eliminated rpath)
|
|
|
|
|
LD_LIBRARY_PATH="$RPM_BUILD_ROOT%{_libdir}:$LD_LIBRARY_PATH" \
|
2020-07-13 19:00:01 +00:00
|
|
|
%make_install -C scripts
|
2016-05-18 12:42:22 +00:00
|
|
|
|
2019-03-27 09:33:41 +00:00
|
|
|
# do not install /usr/share/fish/completions/curl.fish which is also installed
|
|
|
|
|
# by fish-3.0.2-1.module_f31+3716+57207597 and would trigger a conflict
|
|
|
|
|
rm -rf ${RPM_BUILD_ROOT}%{_datadir}/fish
|
|
|
|
|
|
2004-09-09 04:01:52 +00:00
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
|
2008-08-11 23:54:38 +00:00
|
|
|
|
2024-02-01 12:07:37 +00:00
|
|
|
# Don't install man for mk-ca-bundle it's upstream bug
|
|
|
|
|
# should be fixed in next release https://github.com/curl/curl/pull/12843
|
|
|
|
|
rm -f ${RPM_BUILD_ROOT}%{_mandir}/man1/mk-ca-bundle.1*
|
|
|
|
|
|
2018-02-15 09:52:27 +00:00
|
|
|
%ldconfig_scriptlets -n libcurl
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2018-02-15 09:52:27 +00:00
|
|
|
%ldconfig_scriptlets -n libcurl-minimal
|
2017-04-13 10:59:46 +00:00
|
|
|
|
2004-09-09 04:00:18 +00:00
|
|
|
%files
|
2019-03-27 09:33:41 +00:00
|
|
|
%doc CHANGES
|
|
|
|
|
%doc README
|
2020-10-14 07:33:29 +00:00
|
|
|
%doc docs/BUGS.md
|
2019-03-27 09:33:41 +00:00
|
|
|
%doc docs/FAQ
|
2020-12-09 09:30:08 +00:00
|
|
|
%doc docs/FEATURES.md
|
2019-03-27 09:33:41 +00:00
|
|
|
%doc docs/TODO
|
2020-10-14 07:33:29 +00:00
|
|
|
%doc docs/TheArtOfHttpScripting.md
|
2004-09-09 04:00:18 +00:00
|
|
|
%{_bindir}/curl
|
2004-09-09 04:00:24 +00:00
|
|
|
%{_mandir}/man1/curl.1*
|
2019-03-27 09:33:41 +00:00
|
|
|
%{_datadir}/zsh
|
2007-10-24 14:15:06 +00:00
|
|
|
|
|
|
|
|
%files -n libcurl
|
2014-07-11 21:11:42 +00:00
|
|
|
%license COPYING
|
2018-02-19 10:09:14 +00:00
|
|
|
%{_libdir}/libcurl.so.4
|
|
|
|
|
%{_libdir}/libcurl.so.4.[0-9].[0-9]
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2007-10-24 14:15:06 +00:00
|
|
|
%files -n libcurl-devel
|
2016-09-07 08:18:49 +00:00
|
|
|
%doc docs/examples/*.c docs/examples/Makefile.example docs/INTERNALS.md
|
2020-06-24 07:27:34 +00:00
|
|
|
%doc docs/CONTRIBUTE.md docs/libcurl/ABI.md
|
2006-02-23 11:58:07 +00:00
|
|
|
%{_bindir}/curl-config*
|
2004-09-09 04:00:18 +00:00
|
|
|
%{_includedir}/curl
|
|
|
|
|
%{_libdir}/*.so
|
2005-12-08 09:10:34 +00:00
|
|
|
%{_libdir}/pkgconfig/*.pc
|
2004-09-09 04:00:24 +00:00
|
|
|
%{_mandir}/man1/curl-config.1*
|
2004-09-09 04:00:18 +00:00
|
|
|
%{_mandir}/man3/*
|
2007-05-10 13:30:16 +00:00
|
|
|
%{_datadir}/aclocal/libcurl.m4
|
2004-09-09 04:00:18 +00:00
|
|
|
|
2016-02-10 19:37:11 +00:00
|
|
|
%files -n libcurl-minimal
|
|
|
|
|
%license COPYING
|
2018-02-19 10:09:14 +00:00
|
|
|
%{_libdir}/libcurl.so.4.minimal
|
|
|
|
|
%{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
|
2016-02-10 19:37:11 +00:00
|
|
|
|
2004-09-09 04:00:18 +00:00
|
|
|
%changelog
|
2024-02-06 14:25:02 +00:00
|
|
|
* Wed Feb 07 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-4
|
|
|
|
|
- drop curl-minimal subpackage in favor of curl-full (#2262096)
|
|
|
|
|
|
2024-02-05 09:49:10 +00:00
|
|
|
* Mon Feb 05 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-3
|
|
|
|
|
- ignore response body to HEAD requests
|
|
|
|
|
|
2024-02-02 09:22:12 +00:00
|
|
|
* Fri Feb 02 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-2
|
|
|
|
|
- don't build manual for curl-full - use man 1 curl instead (#2262373)
|
|
|
|
|
|
2024-02-01 12:07:37 +00:00
|
|
|
* Thu Feb 01 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2024-0853 - OCSP verification bypass with TLS session reuse
|
|
|
|
|
- drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
|
|
|
|
|
- remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)
|
|
|
|
|
|
2024-01-19 16:32:26 +00:00
|
|
|
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 8.5.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
2023-12-06 07:50:13 +00:00
|
|
|
* Wed Dec 06 2023 Jan Macku <jamacku@redhat.com> - 8.5.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-46218 - cookie mixed case PSL bypass
|
|
|
|
|
CVE-2023-46219 - HSTS long file name clears contents
|
|
|
|
|
|
2023-10-11 13:36:19 +00:00
|
|
|
* Wed Oct 11 2023 Jan Macku <jamacku@redhat.com> - 8.4.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-38545 - SOCKS5 heap buffer overflow
|
|
|
|
|
CVE-2023-38546 - cookie injection with none file
|
|
|
|
|
|
2023-09-13 08:33:22 +00:00
|
|
|
* Wed Sep 13 2023 Jan Macku <jamacku@redhat.com> - 8.3.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-38039 - HTTP headers eat all memory
|
|
|
|
|
|
2023-08-02 12:36:11 +00:00
|
|
|
* Wed Aug 02 2023 Jan Macku <jamacku@redhat.com> - 8.2.1-2
|
|
|
|
|
- enable websockets (#2224651)
|
|
|
|
|
|
2023-07-26 10:40:15 +00:00
|
|
|
* Wed Jul 26 2023 Lukáš Zaoral <lzaoral@redhat.com> - 8.2.1-1
|
|
|
|
|
- new upstream release (rhbz#2226659)
|
|
|
|
|
|
2023-07-19 11:44:49 +00:00
|
|
|
* Wed Jul 19 2023 Jan Macku <jamacku@redhat.com> - 8.2.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-32001 - fopen race condition
|
|
|
|
|
|
2023-05-30 08:05:35 +00:00
|
|
|
* Tue May 30 2023 Jan Macku <jamacku@redhat.com> - 8.1.2-1
|
|
|
|
|
- new upstream release, with small bugfixes and improvements
|
|
|
|
|
|
2023-05-23 08:07:28 +00:00
|
|
|
* Tue May 23 2023 Jan Macku <jamacku@redhat.com> - 8.1.1-1
|
|
|
|
|
- new upstream release, with small bugfixes and improvements
|
|
|
|
|
|
2023-05-17 07:28:55 +00:00
|
|
|
* Wed May 17 2023 Kamil Dudka <kdudka@redhat.com> - 8.1.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-28321 - IDN wildcard match
|
|
|
|
|
CVE-2023-28322 - more POST-after-PUT confusion
|
|
|
|
|
|
2023-04-21 12:32:13 +00:00
|
|
|
* Fri Apr 21 2023 Kamil Dudka <kdudka@redhat.com> - 8.0.1-3
|
2023-04-21 16:01:25 +00:00
|
|
|
- tests: re-enable temporarily disabled test-cases
|
2023-04-21 16:00:44 +00:00
|
|
|
- tests: attempt to fix a conflict on port numbers
|
2023-04-21 12:32:13 +00:00
|
|
|
- apply patches automatically
|
|
|
|
|
|
2023-03-21 14:46:58 +00:00
|
|
|
* Tue Mar 21 2023 Lukáš Zaoral <lzaoral@redhat.com> - 8.0.1-2
|
|
|
|
|
- migrated to SPDX license
|
|
|
|
|
|
2023-03-20 14:39:59 +00:00
|
|
|
* Mon Mar 20 2023 Kamil Dudka <kdudka@redhat.com> - 8.0.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2023-03-20 09:08:53 +00:00
|
|
|
* Mon Mar 20 2023 Kamil Dudka <kdudka@redhat.com> - 8.0.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-27538 - SSH connection too eager reuse still
|
|
|
|
|
CVE-2023-27537 - HSTS double-free
|
|
|
|
|
CVE-2023-27536 - GSS delegation too eager connection re-use
|
|
|
|
|
CVE-2023-27535 - FTP too eager connection reuse
|
|
|
|
|
CVE-2023-27534 - SFTP path ~ resolving discrepancy
|
|
|
|
|
CVE-2023-27533 - TELNET option IAC injection
|
|
|
|
|
|
2023-02-20 13:41:52 +00:00
|
|
|
* Mon Feb 20 2023 Kamil Dudka <kdudka@redhat.com> - 7.88.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2023-02-17 13:34:10 +00:00
|
|
|
* Fri Feb 17 2023 Kamil Dudka <kdudka@redhat.com> - 7.88.0-2
|
|
|
|
|
- http2: set drain on stream end
|
|
|
|
|
|
2023-02-15 09:05:29 +00:00
|
|
|
* Wed Feb 15 2023 Kamil Dudka <kdudka@redhat.com> - 7.88.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2023-23916 - HTTP multi-header compression denial of service
|
|
|
|
|
CVE-2023-23915 - HSTS amnesia with --parallel
|
|
|
|
|
CVE-2023-23914 - HSTS ignored on multiple requests
|
|
|
|
|
|
2023-01-20 16:48:02 +00:00
|
|
|
* Fri Jan 20 2023 Kamil Dudka <kdudka@redhat.com> - 7.87.0-4
|
|
|
|
|
- fix regression in a public header file (#2162716)
|
|
|
|
|
|
2023-01-19 00:50:41 +00:00
|
|
|
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 7.87.0-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
2023-01-11 07:56:33 +00:00
|
|
|
* Wed Jan 11 2023 Kamil Dudka <kdudka@redhat.com> - 7.87.0-2
|
|
|
|
|
- test3012: temporarily disable valgrind (#2143040)
|
|
|
|
|
|
2022-12-21 12:48:45 +00:00
|
|
|
* Wed Dec 21 2022 Kamil Dudka <kdudka@redhat.com> - 7.87.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2022-43552 - HTTP Proxy deny use-after-free
|
|
|
|
|
CVE-2022-43551 - Another HSTS bypass via IDN
|
|
|
|
|
|
2022-11-29 11:07:37 +00:00
|
|
|
* Tue Nov 29 2022 Kamil Dudka <kdudka@redhat.com> - 7.86.0-4
|
|
|
|
|
- noproxy: tailmatch like in 7.85.0 and earlier (#2149224)
|
|
|
|
|
|
2022-11-24 15:25:47 +00:00
|
|
|
* Thu Nov 24 2022 Kamil Dudka <kdudka@redhat.com> - 7.86.0-3
|
|
|
|
|
- enforce versioned libnghttp2 dependency for libcurl (#2144277)
|
|
|
|
|
|
2022-10-31 08:34:58 +00:00
|
|
|
* Mon Oct 31 2022 Kamil Dudka <kdudka@redhat.com> - 7.86.0-2
|
|
|
|
|
- fix regression in noproxy matching
|
|
|
|
|
|
2022-10-26 12:24:08 +00:00
|
|
|
* Wed Oct 26 2022 Kamil Dudka <kdudka@redhat.com> - 7.86.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2022-42916 - HSTS bypass via IDN
|
|
|
|
|
CVE-2022-42915 - HTTP proxy double-free
|
|
|
|
|
CVE-2022-35260 - .netrc parser out-of-bounds access
|
|
|
|
|
CVE-2022-32221 - POST following PUT confusion
|
|
|
|
|
|
2022-10-26 12:16:26 +00:00
|
|
|
* Thu Sep 01 2022 Kamil Dudka <kdudka@redhat.com> - 7.85.0-1
|
2022-09-01 11:38:12 +00:00
|
|
|
- new upstream release, which fixes the following vulnerability
|
|
|
|
|
CVE-2022-35252 - control code in cookie denial of service
|
|
|
|
|
|
2022-08-25 11:16:44 +00:00
|
|
|
* Thu Aug 25 2022 Kamil Dudka <kdudka@redhat.com> - 7.84.0-3
|
|
|
|
|
- tests: fix http2 tests to use CRLF headers to make it work with nghttp2-1.49.0
|
|
|
|
|
|
2022-07-20 23:54:27 +00:00
|
|
|
* Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 7.84.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
2022-06-27 10:57:53 +00:00
|
|
|
* Mon Jun 27 2022 Kamil Dudka <kdudka@redhat.com> - 7.84.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2022-32207 - Unpreserved file permissions
|
|
|
|
|
CVE-2022-32205 - Set-Cookie denial of service
|
|
|
|
|
CVE-2022-32206 - HTTP compression denial of service
|
|
|
|
|
CVE-2022-32208 - FTP-KRB bad message verification
|
|
|
|
|
|
2022-05-11 08:02:14 +00:00
|
|
|
* Wed May 11 2022 Kamil Dudka <kdudka@redhat.com> - 7.83.1-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2022-27782 - fix too eager reuse of TLS and SSH connections
|
|
|
|
|
CVE-2022-27779 - do not accept cookies for TLD with trailing dot
|
|
|
|
|
CVE-2022-27778 - do not remove wrong file on error
|
|
|
|
|
CVE-2022-30115 - hsts: ignore trailing dots when comparing hosts names
|
|
|
|
|
CVE-2022-27780 - reject percent-encoded path separator in URL host
|
|
|
|
|
|
2022-04-27 11:38:35 +00:00
|
|
|
* Wed Apr 27 2022 Kamil Dudka <kdudka@redhat.com> - 7.83.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2022-27774 - curl credential leak on redirect
|
|
|
|
|
CVE-2022-27776 - curl auth/cookie leak on redirect
|
|
|
|
|
CVE-2022-27775 - curl bad local IPv6 connection reuse
|
|
|
|
|
CVE-2022-22576 - curl OAUTH2 bearer bypass in connection re-use
|
|
|
|
|
|
2022-03-15 11:53:45 +00:00
|
|
|
* Tue Mar 15 2022 Kamil Dudka <kdudka@redhat.com> - 7.82.0-2
|
|
|
|
|
- openssl: fix incorrect CURLE_OUT_OF_MEMORY error on CN check failure
|
|
|
|
|
|
2022-03-05 10:15:03 +00:00
|
|
|
* Sat Mar 05 2022 Kamil Dudka <kdudka@redhat.com> - 7.82.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2022-02-24 08:41:36 +00:00
|
|
|
* Thu Feb 24 2022 Kamil Dudka <kdudka@redhat.com> - 7.81.0-4
|
|
|
|
|
- enable IDN support also in libcurl-minimal
|
|
|
|
|
|
2022-02-10 18:11:32 +00:00
|
|
|
* Thu Feb 10 2022 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 7.81.0-3
|
|
|
|
|
- Suggest libcurl-minimal in curl-minimal
|
|
|
|
|
|
2022-01-20 00:08:37 +00:00
|
|
|
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 7.81.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
2022-01-05 08:34:15 +00:00
|
|
|
* Wed Jan 05 2022 Kamil Dudka <kdudka@redhat.com> - 7.81.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2021-11-14 17:06:12 +00:00
|
|
|
* Sun Nov 14 2021 Paul Howarth <paul@city-fan.org> - 7.80.0-2
|
|
|
|
|
- sshserver.pl (used in test suite) now requires the Digest::SHA perl module
|
|
|
|
|
|
2021-11-10 08:03:13 +00:00
|
|
|
* Wed Nov 10 2021 Kamil Dudka <kdudka@redhat.com> - 7.80.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2021-10-26 15:15:50 +00:00
|
|
|
* Tue Oct 26 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.1-3
|
|
|
|
|
- re-enable HSTS in libcurl-minimal as a security feature (#2005874)
|
|
|
|
|
|
2021-09-20 12:54:20 +00:00
|
|
|
* Mon Oct 04 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.1-2
|
2021-10-04 10:29:42 +00:00
|
|
|
- disable more protocols and features in libcurl-minimal (#2005874)
|
2021-09-20 12:54:20 +00:00
|
|
|
|
2021-09-22 07:15:59 +00:00
|
|
|
* Wed Sep 22 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2021-09-16 10:26:16 +00:00
|
|
|
* Thu Sep 16 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.0-4
|
|
|
|
|
- fix regression in http2 implementation introduced in the last release
|
|
|
|
|
|
2021-09-16 10:23:37 +00:00
|
|
|
* Thu Sep 16 2021 Sahana Prasad <sahana@redhat.com> - 7.79.0-3
|
|
|
|
|
- Rebuilt with OpenSSL 3.0.0
|
|
|
|
|
|
2021-09-16 06:44:39 +00:00
|
|
|
* Thu Sep 16 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.0-2
|
|
|
|
|
- make SCP/SFTP tests work with openssh-8.7p1
|
|
|
|
|
|
2021-09-15 07:08:01 +00:00
|
|
|
* Wed Sep 15 2021 Kamil Dudka <kdudka@redhat.com> - 7.79.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2021-22947 - STARTTLS protocol injection via MITM
|
|
|
|
|
CVE-2021-22946 - protocol downgrade required TLS bypassed
|
|
|
|
|
CVE-2021-22945 - use-after-free and double-free in MQTT sending
|
|
|
|
|
|
2021-09-14 17:00:02 +00:00
|
|
|
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 7.78.0-4
|
|
|
|
|
- Rebuilt with OpenSSL 3.0.0
|
|
|
|
|
|
2021-07-23 15:14:53 +00:00
|
|
|
* Fri Jul 23 2021 Kamil Dudka <kdudka@redhat.com> - 7.78.0-3
|
|
|
|
|
- make explicit dependency on openssl work with alpha/beta builds of openssl
|
|
|
|
|
|
2021-07-21 20:15:37 +00:00
|
|
|
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 7.78.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
2021-07-21 08:15:27 +00:00
|
|
|
* Wed Jul 21 2021 Kamil Dudka <kdudka@redhat.com> - 7.78.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2021-22925 - TELNET stack contents disclosure again
|
|
|
|
|
CVE-2021-22924 - bad connection reuse due to flawed path name checks
|
|
|
|
|
CVE-2021-22923 - metalink download sends credentials
|
|
|
|
|
CVE-2021-22922 - wrong content via metalink not discarded
|
|
|
|
|
|
2021-06-02 16:45:38 +00:00
|
|
|
* Wed Jun 02 2021 Kamil Dudka <kdudka@redhat.com> - 7.77.0-2
|
|
|
|
|
- build the curl tool without metalink support (#1967213)
|
|
|
|
|
|
2021-05-26 07:13:52 +00:00
|
|
|
* Wed May 26 2021 Kamil Dudka <kdudka@redhat.com> - 7.77.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2021-22901 - TLS session caching disaster
|
|
|
|
|
CVE-2021-22898 - TELNET stack contents disclosure
|
|
|
|
|
|
2021-05-03 15:53:53 +00:00
|
|
|
* Mon May 03 2021 Kamil Dudka <kdudka@redhat.com> - 7.76.1-2
|
|
|
|
|
- http2: fix resource leaks detected by Coverity
|
|
|
|
|
|
2021-04-14 07:54:02 +00:00
|
|
|
* Wed Apr 14 2021 Kamil Dudka <kdudka@redhat.com> - 7.76.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2021-03-31 08:10:28 +00:00
|
|
|
* Wed Mar 31 2021 Kamil Dudka <kdudka@redhat.com> - 7.76.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2021-22890 - TLS 1.3 session ticket proxy host mixup
|
|
|
|
|
CVE-2021-22876 - Automatic referer leaks credentials
|
|
|
|
|
|
2021-03-24 10:04:10 +00:00
|
|
|
* Wed Mar 24 2021 Kamil Dudka <kdudka@redhat.com> - 7.75.0-3
|
|
|
|
|
- fix SIGSEGV upon disconnect of a ldaps:// transfer
|
|
|
|
|
|
2021-02-23 21:00:29 +00:00
|
|
|
* Tue Feb 23 2021 Kamil Dudka <kdudka@redhat.com> - 7.75.0-2
|
|
|
|
|
- build-require python3-impacket only on Fedora
|
|
|
|
|
|
2021-02-03 07:52:59 +00:00
|
|
|
* Wed Feb 03 2021 Kamil Dudka <kdudka@redhat.com> - 7.75.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2021-01-26 14:13:50 +00:00
|
|
|
* Tue Jan 26 2021 Kamil Dudka <kdudka@redhat.com> - 7.74.0-4
|
|
|
|
|
- do not use stunnel for tests on s390x builds to avoid spurious failures
|
|
|
|
|
|
2021-01-26 02:51:37 +00:00
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 7.74.0-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
2020-12-09 17:51:40 +00:00
|
|
|
* Wed Dec 09 2020 Kamil Dudka <kdudka@redhat.com> - 7.74.0-2
|
|
|
|
|
- do not rewrite shebangs in test-suite to use python3 explicitly
|
|
|
|
|
|
2020-12-09 09:30:08 +00:00
|
|
|
* Wed Dec 09 2020 Kamil Dudka <kdudka@redhat.com> - 7.74.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2020-8286 - curl: Inferior OCSP verification
|
|
|
|
|
CVE-2020-8285 - libcurl: FTP wildcard stack overflow
|
|
|
|
|
CVE-2020-8284 - curl: trusting FTP PASV responses
|
|
|
|
|
|
2020-10-14 09:10:34 +00:00
|
|
|
* Wed Oct 14 2020 Kamil Dudka <kdudka@redhat.com> - 7.73.0-2
|
|
|
|
|
- prevent upstream test 1451 from being skipped
|
|
|
|
|
|
2020-10-14 07:33:29 +00:00
|
|
|
* Wed Oct 14 2020 Kamil Dudka <kdudka@redhat.com> - 7.73.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-09-10 07:17:00 +00:00
|
|
|
* Thu Sep 10 2020 Jinoh Kang <aurhb20@protonmail.ch> - 7.72.0-2
|
2020-09-20 10:49:49 +00:00
|
|
|
- fix multiarch conflicts in libcurl-minimal (#1877671)
|
2020-09-10 07:17:00 +00:00
|
|
|
|
2020-08-19 10:06:12 +00:00
|
|
|
* Wed Aug 19 2020 Kamil Dudka <kdudka@redhat.com> - 7.72.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerability
|
|
|
|
|
CVE-2020-8231 - libcurl: wrong connect-only connection
|
|
|
|
|
|
2020-08-06 09:04:30 +00:00
|
|
|
* Thu Aug 06 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.1-5
|
|
|
|
|
- setopt: unset NOBODY switches to GET if still HEAD
|
|
|
|
|
|
2020-07-27 14:52:54 +00:00
|
|
|
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7.71.1-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
2020-07-13 19:00:01 +00:00
|
|
|
* Mon Jul 13 2020 Tom Stellard <tstellar@redhat.com> - 7.71.1-3
|
|
|
|
|
- Use make macros
|
|
|
|
|
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
|
|
|
|
|
|
2020-07-03 10:47:48 +00:00
|
|
|
* Fri Jul 03 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.1-2
|
|
|
|
|
- curl: make the --krb option work again (#1833193)
|
|
|
|
|
|
2020-07-01 07:24:32 +00:00
|
|
|
* Wed Jul 01 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-06-24 07:27:34 +00:00
|
|
|
* Wed Jun 24 2020 Kamil Dudka <kdudka@redhat.com> - 7.71.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2020-8169 - curl: Partial password leak over DNS on HTTP redirect
|
|
|
|
|
CVE-2020-8177 - curl: overwrite local file with -J
|
|
|
|
|
|
2020-04-29 07:51:03 +00:00
|
|
|
* Wed Apr 29 2020 Kamil Dudka <kdudka@redhat.com> - 7.70.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-04-20 09:21:23 +00:00
|
|
|
* Mon Apr 20 2020 Kamil Dudka <kdudka@redhat.com> - 7.69.1-3
|
|
|
|
|
- SSH: use new ECDSA key types to check known hosts (#1824926)
|
|
|
|
|
|
2020-04-17 16:06:52 +00:00
|
|
|
* Fri Apr 17 2020 Tom Stellard <tstellar@redhat.com> - 7.69.1-2
|
|
|
|
|
- Prevent discarding of -g when compiling with clang
|
|
|
|
|
|
2020-03-11 09:21:27 +00:00
|
|
|
* Wed Mar 11 2020 Kamil Dudka <kdudka@redhat.com> - 7.69.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-03-09 08:53:54 +00:00
|
|
|
* Mon Mar 09 2020 Kamil Dudka <kdudka@redhat.com> - 7.69.0-2
|
|
|
|
|
- make Flatpak work again (#1810989)
|
|
|
|
|
|
2020-03-04 10:39:00 +00:00
|
|
|
* Wed Mar 04 2020 Kamil Dudka <kdudka@redhat.com> - 7.69.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-01-28 15:11:40 +00:00
|
|
|
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7.68.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
|
|
2020-01-08 08:45:26 +00:00
|
|
|
* Wed Jan 08 2020 Kamil Dudka <kdudka@redhat.com> - 7.68.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2020-01-08 08:46:20 +00:00
|
|
|
* Thu Nov 14 2019 Kamil Dudka <kdudka@redhat.com> - 7.67.0-2
|
2019-11-14 12:57:06 +00:00
|
|
|
- fix infinite loop on upload using a glob (#1771025)
|
|
|
|
|
|
2020-01-08 08:46:20 +00:00
|
|
|
* Wed Nov 06 2019 Kamil Dudka <kdudka@redhat.com> - 7.67.0-1
|
2019-11-06 08:21:14 +00:00
|
|
|
- new upstream release
|
|
|
|
|
|
2019-09-11 07:57:42 +00:00
|
|
|
* Wed Sep 11 2019 Kamil Dudka <kdudka@redhat.com> - 7.66.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2019-5481 - double free due to subsequent call of realloc()
|
|
|
|
|
CVE-2019-5482 - heap buffer overflow in function tftp_receive_packet()
|
|
|
|
|
|
2019-08-27 16:10:11 +00:00
|
|
|
* Tue Aug 27 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.3-4
|
|
|
|
|
- avoid reporting spurious error in the HTTP2 framing layer (#1690971)
|
|
|
|
|
|
2019-08-01 14:31:27 +00:00
|
|
|
* Thu Aug 01 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.3-3
|
2019-08-01 14:41:42 +00:00
|
|
|
- improve handling of gss_init_sec_context() failures
|
2019-08-01 14:31:27 +00:00
|
|
|
|
2019-07-24 21:21:56 +00:00
|
|
|
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7.65.3-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
|
|
2019-07-20 11:02:57 +00:00
|
|
|
* Sat Jul 20 2019 Paul Howarth <paul@city-fan.org> - 7.65.3-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2019-07-17 08:28:35 +00:00
|
|
|
* Wed Jul 17 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.2-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2019-06-05 07:30:50 +00:00
|
|
|
* Wed Jun 05 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2019-05-30 13:27:58 +00:00
|
|
|
* Thu May 30 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.0-2
|
|
|
|
|
- fix spurious timeout events with speed-limit (#1714893)
|
|
|
|
|
|
2019-05-22 08:37:45 +00:00
|
|
|
* Wed May 22 2019 Kamil Dudka <kdudka@redhat.com> - 7.65.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2019-5436 - TFTP receive buffer overflow
|
|
|
|
|
CVE-2019-5435 - integer overflows in curl_url_set()
|
|
|
|
|
|
2019-05-09 07:59:31 +00:00
|
|
|
* Thu May 09 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.1-2
|
|
|
|
|
- do not treat failure of gss_init_sec_context() with --negotiate as fatal
|
|
|
|
|
|
2019-03-27 09:33:41 +00:00
|
|
|
* Wed Mar 27 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2019-03-25 11:35:52 +00:00
|
|
|
* Mon Mar 25 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-6
|
|
|
|
|
- remove verbose "Expire in" ... messages (#1690971)
|
|
|
|
|
|
2019-03-25 11:39:00 +00:00
|
|
|
* Thu Mar 21 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-5
|
2019-03-21 08:38:52 +00:00
|
|
|
- avoid spurious "Could not resolve host: [host name]" error messages
|
|
|
|
|
|
2019-02-27 17:02:05 +00:00
|
|
|
* Wed Feb 27 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-4
|
|
|
|
|
- fix NULL dereference if flushing cookies with no CookieInfo set (#1683676)
|
|
|
|
|
|
2019-02-25 13:24:32 +00:00
|
|
|
* Mon Feb 25 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-3
|
|
|
|
|
- prevent NetworkManager from leaking file descriptors (#1680198)
|
|
|
|
|
|
2019-02-11 12:22:07 +00:00
|
|
|
* Mon Feb 11 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-2
|
|
|
|
|
- make zsh completion work again
|
|
|
|
|
|
2019-02-06 08:51:19 +00:00
|
|
|
* Wed Feb 06 2019 Kamil Dudka <kdudka@redhat.com> - 7.64.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2019-3823 - SMTP end-of-response out-of-bounds read
|
|
|
|
|
CVE-2019-3822 - NTLMv2 type-3 header stack buffer overflow
|
|
|
|
|
CVE-2018-16890 - NTLM type-2 out-of-bounds buffer read
|
|
|
|
|
|
2019-02-04 16:45:12 +00:00
|
|
|
* Mon Feb 04 2019 Kamil Dudka <kdudka@redhat.com> - 7.63.0-7
|
|
|
|
|
- prevent valgrind from reporting false positives on x86_64
|
|
|
|
|
|
2019-01-31 16:37:02 +00:00
|
|
|
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7.63.0-6
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
|
|
2019-01-21 09:13:55 +00:00
|
|
|
* Mon Jan 21 2019 Kamil Dudka <kdudka@redhat.com> - 7.63.0-5
|
|
|
|
|
- xattr: strip credentials from any URL that is stored (CVE-2018-20483)
|
|
|
|
|
|
2019-01-04 13:18:26 +00:00
|
|
|
* Fri Jan 04 2019 Kamil Dudka <kdudka@redhat.com> - 7.63.0-4
|
|
|
|
|
- replace 0105-curl-7.63.0-libstubgss-ldadd.patch by upstream patch
|
|
|
|
|
|
2018-12-19 12:42:58 +00:00
|
|
|
* Wed Dec 19 2018 Kamil Dudka <kdudka@redhat.com> - 7.63.0-3
|
|
|
|
|
- curl -J: do not append to the destination file (#1658574)
|
|
|
|
|
|
2018-12-14 10:21:54 +00:00
|
|
|
* Fri Dec 14 2018 Kamil Dudka <kdudka@redhat.com> - 7.63.0-2
|
|
|
|
|
- revert an upstream commit that broke `fedpkg new-sources` (#1659329)
|
|
|
|
|
|
2018-12-12 08:45:07 +00:00
|
|
|
* Wed Dec 12 2018 Kamil Dudka <kdudka@redhat.com> - 7.63.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2018-10-31 09:49:24 +00:00
|
|
|
* Wed Oct 31 2018 Kamil Dudka <kdudka@redhat.com> - 7.62.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2018-16839 - SASL password overflow via integer overflow
|
|
|
|
|
CVE-2018-16840 - use-after-free in handle close
|
|
|
|
|
CVE-2018-16842 - warning message out-of-buffer read
|
|
|
|
|
|
2018-10-08 11:45:20 +00:00
|
|
|
* Thu Oct 11 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.1-3
|
2018-10-11 14:06:50 +00:00
|
|
|
- enable TLS 1.3 post-handshake auth in OpenSSL
|
2018-10-08 11:45:20 +00:00
|
|
|
- update the documentation of --tlsv1.0 in curl(1) man page
|
|
|
|
|
|
2018-10-04 13:37:53 +00:00
|
|
|
* Thu Oct 04 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.1-2
|
2018-10-05 11:59:35 +00:00
|
|
|
- enforce versioned libpsl dependency for libcurl (#1631804)
|
2018-10-04 13:40:31 +00:00
|
|
|
- test320: update expected output for gnutls-3.6.4
|
2018-10-04 13:37:53 +00:00
|
|
|
- drop 0105-curl-7.61.0-tests-ssh-keygen.patch no longer needed (#1622594)
|
|
|
|
|
|
2018-09-05 07:57:41 +00:00
|
|
|
* Wed Sep 05 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.1-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerability
|
|
|
|
|
CVE-2018-14618 - NTLM password overflow via integer overflow
|
|
|
|
|
|
2018-09-04 13:20:55 +00:00
|
|
|
* Tue Sep 04 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-8
|
|
|
|
|
- make the --tls13-ciphers option work
|
|
|
|
|
|
2018-08-27 13:58:33 +00:00
|
|
|
* Mon Aug 27 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-7
|
|
|
|
|
- tests: make ssh-keygen always produce PEM format (#1622594)
|
|
|
|
|
|
2018-08-15 11:56:12 +00:00
|
|
|
* Wed Aug 15 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-6
|
|
|
|
|
- scp/sftp: fix infinite connect loop on invalid private key (#1595135)
|
|
|
|
|
|
2018-08-09 11:37:25 +00:00
|
|
|
* Thu Aug 09 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-5
|
|
|
|
|
- ssl: set engine implicitly when a PKCS#11 URI is provided (#1219544)
|
|
|
|
|
|
2018-08-07 14:56:26 +00:00
|
|
|
* Tue Aug 07 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-4
|
|
|
|
|
- relax crypto policy for the test-suite to make it pass again (#1610888)
|
|
|
|
|
|
2018-07-31 08:33:53 +00:00
|
|
|
* Tue Jul 31 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-3
|
2018-07-31 08:34:24 +00:00
|
|
|
- disable flaky test 1900, which covers deprecated HTTP pipelining
|
2018-07-31 08:33:53 +00:00
|
|
|
- adapt test 323 for updated OpenSSL
|
|
|
|
|
|
2018-07-12 22:28:24 +00:00
|
|
|
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 7.61.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
|
|
2018-07-11 12:16:32 +00:00
|
|
|
* Wed Jul 11 2018 Kamil Dudka <kdudka@redhat.com> - 7.61.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerability
|
|
|
|
|
CVE-2018-0500 - SMTP send heap buffer overflow
|
|
|
|
|
|
2018-07-10 11:51:08 +00:00
|
|
|
* Tue Jul 10 2018 Kamil Dudka <kdudka@redhat.com> - 7.60.0-3
|
|
|
|
|
- enable support for brotli compression in libcurl-full
|
|
|
|
|
|
2018-07-04 13:07:32 +00:00
|
|
|
* Wed Jul 04 2018 Kamil Dudka <kdudka@redhat.com> - 7.60.0-2
|
|
|
|
|
- do not hard-wire path of the Python 3 interpreter
|
|
|
|
|
|
2018-05-16 11:16:56 +00:00
|
|
|
* Wed May 16 2018 Kamil Dudka <kdudka@redhat.com> - 7.60.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2018-1000300 - FTP shutdown response buffer overflow
|
|
|
|
|
CVE-2018-1000301 - RTSP bad headers buffer over-read
|
|
|
|
|
|
2018-03-15 13:22:08 +00:00
|
|
|
* Thu Mar 15 2018 Kamil Dudka <kdudka@redhat.com> - 7.59.0-3
|
|
|
|
|
- make the test-suite use Python 3
|
|
|
|
|
|
2018-03-14 13:42:24 +00:00
|
|
|
* Wed Mar 14 2018 Kamil Dudka <kdudka@redhat.com> - 7.59.0-2
|
|
|
|
|
- ftp: fix typo in recursive callback detection for seeking
|
|
|
|
|
|
2018-03-14 09:23:40 +00:00
|
|
|
* Wed Mar 14 2018 Kamil Dudka <kdudka@redhat.com> - 7.59.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2018-1000120 - FTP path trickery leads to NIL byte out of bounds write
|
|
|
|
|
CVE-2018-1000121 - LDAP NULL pointer dereference
|
|
|
|
|
CVE-2018-1000122 - RTSP RTP buffer over-read
|
|
|
|
|
|
2018-03-12 09:28:21 +00:00
|
|
|
* Mon Mar 12 2018 Kamil Dudka <kdudka@redhat.com> - 7.58.0-8
|
|
|
|
|
- http2: mark the connection for close on GOAWAY
|
|
|
|
|
|
2018-02-19 10:09:14 +00:00
|
|
|
* Mon Feb 19 2018 Paul Howarth <paul@city-fan.org> - 7.58.0-7
|
|
|
|
|
- Add explicity-used build requirements
|
|
|
|
|
- Fix libcurl soname version number in %%files list to avoid accidental soname
|
|
|
|
|
bumps
|
|
|
|
|
|
2018-02-15 09:52:27 +00:00
|
|
|
* Thu Feb 15 2018 Paul Howarth <paul@city-fan.org> - 7.58.0-6
|
|
|
|
|
- switch to %%ldconfig_scriptlets
|
|
|
|
|
- drop legacy BuildRoot: and Group: tags
|
|
|
|
|
- enforce versioned libssh dependency for libcurl
|
|
|
|
|
|
2018-02-13 09:26:20 +00:00
|
|
|
* Tue Feb 13 2018 Kamil Dudka <kdudka@redhat.com> - 7.58.0-5
|
|
|
|
|
- drop temporary workaround for #1540549
|
|
|
|
|
|
2018-02-07 06:08:47 +00:00
|
|
|
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 7.58.0-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
2018-01-31 13:41:00 +00:00
|
|
|
* Wed Jan 31 2018 Kamil Dudka <kdudka@redhat.com> - 7.58.0-3
|
2018-02-01 11:55:07 +00:00
|
|
|
- temporarily work around internal compiler error on x86_64 (#1540549)
|
2018-01-31 13:41:00 +00:00
|
|
|
- disable brp-ldconfig to make RemovePathPostfixes work with shared libs again
|
|
|
|
|
|
2018-01-24 15:24:30 +00:00
|
|
|
* Wed Jan 24 2018 Andreas Schneider <asn@redhat.com> - 7.58.0-2
|
|
|
|
|
- use libssh (instead of libssh2) to implement SCP/SFTP in libcurl (#1531483)
|
|
|
|
|
|
2018-01-24 10:36:50 +00:00
|
|
|
* Wed Jan 24 2018 Kamil Dudka <kdudka@redhat.com> - 7.58.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2018-1000005 - curl: HTTP/2 trailer out-of-bounds read
|
|
|
|
|
CVE-2018-1000007 - curl: HTTP authentication leak in redirects
|
|
|
|
|
|
2017-11-29 12:58:44 +00:00
|
|
|
* Wed Nov 29 2017 Kamil Dudka <kdudka@redhat.com> - 7.57.0-1
|
|
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2017-8816 - curl: NTLM buffer overflow via integer overflow
|
|
|
|
|
CVE-2017-8817 - curl: FTP wildcard out of bounds read
|
|
|
|
|
CVE-2017-8818 - curl: SSL out of buffer access
|
|
|
|
|
|
2017-10-23 08:10:34 +00:00
|
|
|
* Mon Oct 23 2017 Kamil Dudka <kdudka@redhat.com> - 7.56.1-1
|
|
|
|
|
- new upstream release (fixes CVE-2017-1000257)
|
|
|
|
|
|
2017-10-04 07:31:13 +00:00
|
|
|
* Wed Oct 04 2017 Kamil Dudka <kdudka@redhat.com> - 7.56.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2017-1000254)
|
|
|
|
|
|
2017-08-28 11:39:25 +00:00
|
|
|
* Mon Aug 28 2017 Kamil Dudka <kdudka@redhat.com> - 7.55.1-5
|
|
|
|
|
- apply the patch for the previous commit and fix its name (#1485702)
|
|
|
|
|
|
2017-08-28 11:26:23 +00:00
|
|
|
* Mon Aug 28 2017 Bastien Nocera <bnocera@redhat.com> - 7.55.1-4
|
|
|
|
|
- Fix NetworkManager connectivity check not working (#1485702)
|
|
|
|
|
|
2017-08-22 15:39:58 +00:00
|
|
|
* Tue Aug 22 2017 Kamil Dudka <kdudka@redhat.com> 7.55.1-3
|
|
|
|
|
- utilize system wide crypto policies for TLS (#1483972)
|
|
|
|
|
|
2017-08-15 10:34:08 +00:00
|
|
|
* Tue Aug 15 2017 Kamil Dudka <kdudka@redhat.com> 7.55.1-2
|
|
|
|
|
- make zsh completion work again
|
|
|
|
|
|
2017-08-14 07:37:22 +00:00
|
|
|
* Mon Aug 14 2017 Kamil Dudka <kdudka@redhat.com> 7.55.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2017-08-09 08:45:36 +00:00
|
|
|
* Wed Aug 09 2017 Kamil Dudka <kdudka@redhat.com> 7.55.0-1
|
2017-08-09 09:34:32 +00:00
|
|
|
- drop multilib fix for libcurl header files no longer needed
|
2017-08-09 08:45:36 +00:00
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2017-1000099 - FILE buffer read out of bounds
|
|
|
|
|
CVE-2017-1000100 - TFTP sends more than buffer size
|
|
|
|
|
CVE-2017-1000101 - URL globbing out of bounds read
|
|
|
|
|
|
2017-08-02 19:22:27 +00:00
|
|
|
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7.54.1-8
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
|
|
2017-07-28 19:15:25 +00:00
|
|
|
* Fri Jul 28 2017 Florian Weimer <fweimer@redhat.com> - 7.54.1-7
|
|
|
|
|
- Rebuild with fixed binutils (#1475636)
|
|
|
|
|
|
2017-07-28 17:43:57 +00:00
|
|
|
* Fri Jul 28 2017 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 7.54.1-6
|
|
|
|
|
- Enable separate debuginfo back
|
|
|
|
|
|
2017-07-27 08:02:53 +00:00
|
|
|
* Thu Jul 27 2017 Kamil Dudka <kdudka@redhat.com> 7.54.1-5
|
|
|
|
|
- rebuild to fix broken linkage of cmake on ppc64le
|
|
|
|
|
|
2017-07-26 14:47:43 +00:00
|
|
|
* Wed Jul 26 2017 Kamil Dudka <kdudka@redhat.com> 7.54.1-4
|
|
|
|
|
- avoid build failure caused broken RPM code that produces debuginfo packages
|
|
|
|
|
|
2017-07-26 05:48:14 +00:00
|
|
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7.54.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
|
|
2017-06-19 11:28:00 +00:00
|
|
|
* Mon Jun 19 2017 Kamil Dudka <kdudka@redhat.com> 7.54.1-2
|
|
|
|
|
- enforce versioned openssl-libs dependency for libcurl (#1462184)
|
|
|
|
|
|
2017-06-14 08:35:48 +00:00
|
|
|
* Wed Jun 14 2017 Kamil Dudka <kdudka@redhat.com> 7.54.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2017-05-16 11:24:33 +00:00
|
|
|
* Tue May 16 2017 Kamil Dudka <kdudka@redhat.com> 7.54.0-5
|
|
|
|
|
- add *-full provides for curl and libcurl to make them explicitly installable
|
|
|
|
|
|
2017-05-04 10:42:41 +00:00
|
|
|
* Thu May 04 2017 Kamil Dudka <kdudka@redhat.com> 7.54.0-4
|
|
|
|
|
- make curl-minimal require a new enough version of libcurl
|
|
|
|
|
|
2017-04-27 08:42:34 +00:00
|
|
|
* Thu Apr 27 2017 Kamil Dudka <kdudka@redhat.com> 7.54.0-3
|
|
|
|
|
- switch the TLS backend back to OpenSSL (#1445153)
|
|
|
|
|
|
2017-04-25 16:31:45 +00:00
|
|
|
* Tue Apr 25 2017 Kamil Dudka <kdudka@redhat.com> 7.54.0-2
|
2017-04-25 16:35:27 +00:00
|
|
|
- nss: use libnssckbi.so as the default source of trust
|
2017-04-25 16:31:45 +00:00
|
|
|
- nss: do not leak PKCS #11 slot while loading a key (#1444860)
|
|
|
|
|
|
2017-04-20 07:04:35 +00:00
|
|
|
* Thu Apr 20 2017 Kamil Dudka <kdudka@redhat.com> 7.54.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2017-7468)
|
|
|
|
|
|
2017-04-13 10:59:46 +00:00
|
|
|
* Thu Apr 13 2017 Paul Howarth <paul@city-fan.org> 7.53.1-7
|
|
|
|
|
- add %%post and %%postun scriptlets for libcurl-minimal
|
|
|
|
|
- libcurl-minimal provides both libcurl and libcurl%%{?_isa}
|
|
|
|
|
- remove some legacy spec file cruft
|
|
|
|
|
|
2016-02-10 19:37:11 +00:00
|
|
|
* Wed Apr 12 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-6
|
|
|
|
|
- provide (lib)curl-minimal subpackages with lightweight build of (lib)curl
|
|
|
|
|
|
2017-04-10 11:32:42 +00:00
|
|
|
* Mon Apr 10 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-5
|
|
|
|
|
- disable upstream test 2033 (flaky test for HTTP/1 pipelining)
|
|
|
|
|
|
2017-04-07 10:09:02 +00:00
|
|
|
* Fri Apr 07 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-4
|
|
|
|
|
- fix out of bounds read in curl --write-out (CVE-2017-7407)
|
|
|
|
|
|
2017-03-06 09:30:12 +00:00
|
|
|
* Mon Mar 06 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-3
|
|
|
|
|
- make the dependency on nss-pem arch-specific (#1428550)
|
|
|
|
|
|
2017-03-02 15:46:13 +00:00
|
|
|
* Thu Mar 02 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-2
|
|
|
|
|
- re-enable valgrind on ix86 because sqlite is fixed (#1428286)
|
|
|
|
|
|
2017-02-24 09:49:35 +00:00
|
|
|
* Fri Feb 24 2017 Kamil Dudka <kdudka@redhat.com> 7.53.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2017-02-22 09:29:53 +00:00
|
|
|
* Wed Feb 22 2017 Kamil Dudka <kdudka@redhat.com> 7.53.0-1
|
2017-02-22 11:17:07 +00:00
|
|
|
- do not use valgrind on ix86 until sqlite is rebuilt by patched GCC (#1423434)
|
2017-02-22 09:29:53 +00:00
|
|
|
- new upstream release (fixes CVE-2017-2629)
|
|
|
|
|
|
2017-02-10 08:05:00 +00:00
|
|
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 7.52.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
|
|
2016-12-21 08:44:58 +00:00
|
|
|
* Fri Dec 23 2016 Kamil Dudka <kdudka@redhat.com> 7.52.1-1
|
|
|
|
|
- new upstream release (fixes CVE-2016-9586)
|
|
|
|
|
|
2016-11-21 08:54:16 +00:00
|
|
|
* Mon Nov 21 2016 Kamil Dudka <kdudka@redhat.com> 7.51.0-3
|
|
|
|
|
- map CURL_SSLVERSION_DEFAULT to NSS default, add support for TLS 1.3 (#1396719)
|
|
|
|
|
|
2016-11-15 17:33:19 +00:00
|
|
|
* Tue Nov 15 2016 Kamil Dudka <kdudka@redhat.com> 7.51.0-2
|
2016-11-15 17:40:23 +00:00
|
|
|
- stricter host name checking for file:// URLs
|
2016-11-15 17:33:19 +00:00
|
|
|
- ssh: check md5 fingerprints case insensitively
|
|
|
|
|
|
2016-11-02 09:26:24 +00:00
|
|
|
* Wed Nov 02 2016 Kamil Dudka <kdudka@redhat.com> 7.51.0-1
|
2016-11-02 10:14:11 +00:00
|
|
|
- temporarily disable failing libidn2 test-cases
|
2016-11-02 09:26:24 +00:00
|
|
|
- new upstream release, which fixes the following vulnerabilities
|
|
|
|
|
CVE-2016-8615 - Cookie injection for other servers
|
|
|
|
|
CVE-2016-8616 - Case insensitive password comparison
|
|
|
|
|
CVE-2016-8617 - Out-of-bounds write via unchecked multiplication
|
|
|
|
|
CVE-2016-8618 - Double-free in curl_maprintf
|
|
|
|
|
CVE-2016-8619 - Double-free in krb5 code
|
|
|
|
|
CVE-2016-8620 - Glob parser write/read out of bounds
|
|
|
|
|
CVE-2016-8621 - curl_getdate out-of-bounds read
|
|
|
|
|
CVE-2016-8622 - URL unescape heap overflow via integer truncation
|
|
|
|
|
CVE-2016-8623 - Use-after-free via shared cookies
|
|
|
|
|
CVE-2016-8624 - Invalid URL parsing with '#'
|
|
|
|
|
CVE-2016-8625 - IDNA 2003 makes curl use wrong host
|
|
|
|
|
|
2016-10-20 11:39:29 +00:00
|
|
|
* Thu Oct 20 2016 Kamil Dudka <kdudka@redhat.com> 7.50.3-3
|
|
|
|
|
- drop 0103-curl-7.50.0-stunnel.patch no longer needed
|
|
|
|
|
|
2016-10-07 10:22:22 +00:00
|
|
|
* Fri Oct 07 2016 Kamil Dudka <kdudka@redhat.com> 7.50.3-2
|
|
|
|
|
- use the just built version of libcurl while generating zsh completion
|
|
|
|
|
|
2016-09-14 08:49:15 +00:00
|
|
|
* Wed Sep 14 2016 Kamil Dudka <kdudka@redhat.com> 7.50.3-1
|
|
|
|
|
- new upstream release (fixes CVE-2016-7167)
|
|
|
|
|
|
2016-09-07 08:18:49 +00:00
|
|
|
* Wed Sep 07 2016 Kamil Dudka <kdudka@redhat.com> 7.50.2-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2016-08-26 13:36:16 +00:00
|
|
|
* Fri Aug 26 2016 Kamil Dudka <kdudka@redhat.com> 7.50.1-2
|
2016-08-26 13:38:06 +00:00
|
|
|
- work around race condition in PK11_FindSlotByName()
|
2016-08-26 13:36:16 +00:00
|
|
|
- fix incorrect use of a previously loaded certificate from file
|
|
|
|
|
(related to CVE-2016-5420)
|
|
|
|
|
|
2016-08-03 08:04:16 +00:00
|
|
|
* Wed Aug 03 2016 Kamil Dudka <kdudka@redhat.com> 7.50.1-1
|
|
|
|
|
- new upstream release (fixes CVE-2016-5419, CVE-2016-5420, and CVE-2016-5421)
|
|
|
|
|
|
2016-07-26 14:44:43 +00:00
|
|
|
* Tue Jul 26 2016 Kamil Dudka <kdudka@redhat.com> 7.50.0-2
|
|
|
|
|
- run HTTP/2 tests on all architectures (#1360319 now worked around in nghttp2)
|
|
|
|
|
|
2016-07-21 14:30:02 +00:00
|
|
|
* Thu Jul 21 2016 Kamil Dudka <kdudka@redhat.com> 7.50.0-1
|
2016-07-21 15:21:41 +00:00
|
|
|
- run HTTP/2 tests only on Intel for now to work around #1358845
|
2016-07-21 14:36:33 +00:00
|
|
|
- require nss-pem because it is no longer included in the nss package (#1347336)
|
2016-07-21 14:30:02 +00:00
|
|
|
- fix HTTPS and FTPS tests (work around stunnel bug #1358810)
|
2016-07-21 09:31:27 +00:00
|
|
|
- new upstream release
|
|
|
|
|
|
2016-06-17 15:49:49 +00:00
|
|
|
* Fri Jun 17 2016 Kamil Dudka <kdudka@redhat.com> 7.49.1-3
|
|
|
|
|
- use multilib-rpm-config to install arch-dependent header files
|
|
|
|
|
|
2016-06-03 11:27:18 +00:00
|
|
|
* Fri Jun 03 2016 Kamil Dudka <kdudka@redhat.com> 7.49.1-2
|
|
|
|
|
- fix SIGSEGV of the curl tool while parsing URL with too many globs (#1340757)
|
|
|
|
|
|
2016-05-30 07:24:56 +00:00
|
|
|
* Mon May 30 2016 Kamil Dudka <kdudka@redhat.com> 7.49.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2016-05-18 12:42:22 +00:00
|
|
|
* Wed May 18 2016 Kamil Dudka <kdudka@redhat.com> 7.49.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2016-03-23 12:04:52 +00:00
|
|
|
* Wed Mar 23 2016 Kamil Dudka <kdudka@redhat.com> 7.48.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2016-03-02 10:23:46 +00:00
|
|
|
* Wed Mar 02 2016 Kamil Dudka <kdudka@redhat.com> 7.47.1-4
|
|
|
|
|
- do not refuse cookies for localhost (#1308791)
|
|
|
|
|
|
2016-02-17 12:02:59 +00:00
|
|
|
* Wed Feb 17 2016 Kamil Dudka <kdudka@redhat.com> 7.47.1-3
|
|
|
|
|
- make SCP and SFTP test-cases work with up2date OpenSSH
|
|
|
|
|
|
2016-02-10 17:54:34 +00:00
|
|
|
* Wed Feb 10 2016 Kamil Dudka <kdudka@redhat.com> 7.47.1-2
|
|
|
|
|
- enable support for Public Suffix List (#1305701)
|
|
|
|
|
|
2016-02-08 11:27:19 +00:00
|
|
|
* Mon Feb 08 2016 Kamil Dudka <kdudka@redhat.com> 7.47.1-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2016-02-03 18:21:15 +00:00
|
|
|
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 7.47.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
|
|
2016-01-27 08:20:36 +00:00
|
|
|
* Wed Jan 27 2016 Kamil Dudka <kdudka@redhat.com> 7.47.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2016-0755)
|
|
|
|
|
|
2015-12-04 14:41:44 +00:00
|
|
|
* Fri Dec 4 2015 Kamil Dudka <kdudka@redhat.com> 7.46.0-2
|
|
|
|
|
- own /usr/share/zsh/site-functions instead of requiring zsh (#1288529)
|
|
|
|
|
|
2015-12-02 09:49:29 +00:00
|
|
|
* Wed Dec 2 2015 Kamil Dudka <kdudka@redhat.com> 7.46.0-1
|
2015-12-02 12:37:59 +00:00
|
|
|
- disable silent builds (suggested by Paul Howarth)
|
2015-12-02 12:17:27 +00:00
|
|
|
- use default port numbers when running the upstream test-suite
|
2015-12-02 11:43:14 +00:00
|
|
|
- install zsh completion script
|
2015-12-02 09:49:29 +00:00
|
|
|
- new upstream release
|
|
|
|
|
|
2015-10-07 13:43:06 +00:00
|
|
|
* Wed Oct 7 2015 Paul Howarth <paul@city-fan.org> 7.45.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
- drop %%defattr, redundant since rpm 4.4
|
|
|
|
|
|
2015-09-18 16:13:13 +00:00
|
|
|
* Fri Sep 18 2015 Kamil Dudka <kdudka@redhat.com> 7.44.0-2
|
|
|
|
|
- prevent NSS from incorrectly re-using a session (#1104597)
|
|
|
|
|
|
2015-08-12 10:04:39 +00:00
|
|
|
* Wed Aug 12 2015 Kamil Dudka <kdudka@redhat.com> 7.44.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2015-07-30 13:27:33 +00:00
|
|
|
* Thu Jul 30 2015 Kamil Dudka <kdudka@redhat.com> 7.43.0-3
|
|
|
|
|
- prevent dnf from crashing when using both FTP and HTTP (#1248389)
|
|
|
|
|
|
2015-06-30 16:21:57 +00:00
|
|
|
* Thu Jul 16 2015 Kamil Dudka <kdudka@redhat.com> 7.43.0-2
|
|
|
|
|
- build support for the HTTP/2 protocol
|
|
|
|
|
|
2015-06-17 13:48:15 +00:00
|
|
|
* Wed Jun 17 2015 Kamil Dudka <kdudka@redhat.com> 7.43.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2015-3236 and CVE-2015-3237)
|
|
|
|
|
|
2015-06-17 03:33:56 +00:00
|
|
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.42.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
|
|
2015-06-05 11:23:20 +00:00
|
|
|
* Fri Jun 05 2015 Kamil Dudka <kdudka@redhat.com> 7.42.1-2
|
|
|
|
|
- curl-config --libs now works on x86_64 without libcurl-devel.x86_64 (#1228363)
|
|
|
|
|
|
2015-04-29 07:48:16 +00:00
|
|
|
* Wed Apr 29 2015 Kamil Dudka <kdudka@redhat.com> 7.42.1-1
|
|
|
|
|
- new upstream release (fixes CVE-2015-3153)
|
|
|
|
|
|
2015-04-22 10:40:08 +00:00
|
|
|
* Wed Apr 22 2015 Kamil Dudka <kdudka@redhat.com> 7.42.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2015-3143, CVE-2015-3144, CVE-2015-3145,
|
|
|
|
|
and CVE-2015-3148)
|
2015-04-22 13:01:09 +00:00
|
|
|
- implement public key pinning for NSS backend (#1195771)
|
2015-04-22 13:45:07 +00:00
|
|
|
- do not run flaky test-cases in %%check
|
2015-04-22 10:40:08 +00:00
|
|
|
|
2015-02-25 09:39:43 +00:00
|
|
|
* Wed Feb 25 2015 Kamil Dudka <kdudka@redhat.com> 7.41.0-1
|
|
|
|
|
- new upstream release
|
2015-02-25 11:23:44 +00:00
|
|
|
- include extern-scan.pl to make test1135 succeed (upstream commit 1514b718)
|
2015-02-25 09:39:43 +00:00
|
|
|
|
2015-02-23 12:46:07 +00:00
|
|
|
* Mon Feb 23 2015 Kamil Dudka <kdudka@redhat.com> 7.40.0-3
|
|
|
|
|
- fix a spurious connect failure on dual-stacked hosts (#1187531)
|
|
|
|
|
|
2015-02-21 20:22:45 +00:00
|
|
|
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 7.40.0-2
|
|
|
|
|
- Rebuilt for Fedora 23 Change
|
|
|
|
|
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
|
|
|
|
|
2015-01-08 10:24:05 +00:00
|
|
|
* Thu Jan 08 2015 Kamil Dudka <kdudka@redhat.com> 7.40.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2014-8150)
|
|
|
|
|
|
2014-11-05 09:42:27 +00:00
|
|
|
* Wed Nov 05 2014 Kamil Dudka <kdudka@redhat.com> 7.39.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2014-3707)
|
|
|
|
|
|
2014-10-21 10:14:19 +00:00
|
|
|
* Tue Oct 21 2014 Kamil Dudka <kdudka@redhat.com> 7.38.0-2
|
|
|
|
|
- fix a connection failure when FTPS handle is reused
|
|
|
|
|
|
2014-09-10 13:34:06 +00:00
|
|
|
* Wed Sep 10 2014 Kamil Dudka <kdudka@redhat.com> 7.38.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2014-3613 and CVE-2014-3620)
|
|
|
|
|
|
2014-08-16 01:56:30 +00:00
|
|
|
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.37.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
|
|
|
2014-08-13 13:15:17 +00:00
|
|
|
* Wed Aug 13 2014 Rex Dieter <rdieter@fedoraproject.org> 7.37.1-2
|
|
|
|
|
- include arch'd Requires/Provides
|
|
|
|
|
|
2014-07-16 15:48:56 +00:00
|
|
|
* Wed Jul 16 2014 Kamil Dudka <kdudka@redhat.com> 7.37.1-1
|
|
|
|
|
- new upstream release
|
2014-07-16 16:09:14 +00:00
|
|
|
- fix endless loop with GSSAPI proxy auth (patches by David Woodhouse, #1118751)
|
2014-07-16 15:48:56 +00:00
|
|
|
|
2014-07-11 21:11:42 +00:00
|
|
|
* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> 7.37.0-4
|
|
|
|
|
- fix license handling
|
|
|
|
|
|
2014-07-04 14:27:42 +00:00
|
|
|
* Fri Jul 04 2014 Kamil Dudka <kdudka@redhat.com> 7.37.0-3
|
|
|
|
|
- various SSL-related fixes (mainly crash on connection failure)
|
|
|
|
|
|
2014-06-07 06:30:59 +00:00
|
|
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.37.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
2014-05-21 08:42:01 +00:00
|
|
|
* Wed May 21 2014 Kamil Dudka <kdudka@redhat.com> 7.37.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2014-05-09 21:43:40 +00:00
|
|
|
* Fri May 09 2014 Kamil Dudka <kdudka@redhat.com> 7.36.0-4
|
|
|
|
|
- auth failure on duplicated 'WWW-Authenticate: Negotiate' header (#1093348)
|
|
|
|
|
|
2014-04-25 15:36:51 +00:00
|
|
|
* Fri Apr 25 2014 Kamil Dudka <kdudka@redhat.com> 7.36.0-3
|
|
|
|
|
- nss: implement non-blocking SSL handshake
|
|
|
|
|
|
2014-04-02 13:25:45 +00:00
|
|
|
* Wed Apr 02 2014 Kamil Dudka <kdudka@redhat.com> 7.36.0-2
|
|
|
|
|
- extend URL parser to support IPv6 zone identifiers (#680996)
|
|
|
|
|
|
2014-03-26 07:48:31 +00:00
|
|
|
* Wed Mar 26 2014 Kamil Dudka <kdudka@redhat.com> 7.36.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2014-0138)
|
|
|
|
|
|
2014-03-17 18:33:01 +00:00
|
|
|
* Mon Mar 17 2014 Paul Howarth <paul@city-fan.org> 7.35.0-5
|
|
|
|
|
- add all perl build requirements for the test suite, in a portable way
|
|
|
|
|
|
2014-03-17 14:22:14 +00:00
|
|
|
* Mon Mar 17 2014 Kamil Dudka <kdudka@redhat.com> 7.35.0-4
|
|
|
|
|
- add BR for perl-Digest-MD5, which is required by the test-suite
|
|
|
|
|
|
2014-03-05 14:17:57 +00:00
|
|
|
* Wed Mar 05 2014 Kamil Dudka <kdudka@redhat.com> 7.35.0-3
|
|
|
|
|
- avoid spurious failure of test1086 on s390(x) koji builders (#1072273)
|
|
|
|
|
|
2014-02-25 11:50:11 +00:00
|
|
|
* Tue Feb 25 2014 Kamil Dudka <kdudka@redhat.com> 7.35.0-2
|
|
|
|
|
- refresh expired cookie in test172 from upstream test-suite (#1068967)
|
|
|
|
|
|
2014-01-29 09:23:58 +00:00
|
|
|
* Wed Jan 29 2014 Kamil Dudka <kdudka@redhat.com> 7.35.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2014-0015)
|
|
|
|
|
|
2013-12-18 15:49:27 +00:00
|
|
|
* Wed Dec 18 2013 Kamil Dudka <kdudka@redhat.com> 7.34.0-1
|
|
|
|
|
- new upstream release
|
|
|
|
|
|
2013-12-02 14:25:17 +00:00
|
|
|
* Mon Dec 02 2013 Kamil Dudka <kdudka@redhat.com> 7.33.0-2
|
|
|
|
|
- allow to use TLS > 1.0 if built against recent NSS
|
|
|
|
|
|
2013-10-14 20:51:57 +00:00
|
|
|
* Mon Oct 14 2013 Kamil Dudka <kdudka@redhat.com> 7.33.0-1
|
|
|
|
|
- new upstream release
|
2013-10-18 16:36:15 +00:00
|
|
|
- fix missing initialization in NTLM code causing test 906 to fail
|
2013-10-21 16:54:10 +00:00
|
|
|
- fix missing initialization in SSH code causing test 619 to fail
|
2013-10-14 20:51:57 +00:00
|
|
|
|
2013-10-11 12:16:18 +00:00
|
|
|
* Fri Oct 11 2013 Kamil Dudka <kdudka@redhat.com> 7.32.0-3
|
|
|
|
|
- do not limit the speed of SCP upload on a fast connection
|
|
|
|
|
|
2013-09-09 11:40:57 +00:00
|
|
|
* Mon Sep 09 2013 Kamil Dudka <kdudka@redhat.com> 7.32.0-2
|
|
|
|
|
- avoid delay if FTP is aborted in CURLOPT_HEADERFUNCTION callback (#1005686)
|
|
|
|
|
|
2013-08-12 11:50:13 +00:00
|
|
|
* Mon Aug 12 2013 Kamil Dudka <kdudka@redhat.com> 7.32.0-1
|
|
|
|
|
- new upstream release
|
2013-08-12 13:14:35 +00:00
|
|
|
- make sure that NSS is initialized prior to calling PK11_GenerateRandom()
|
2013-08-12 11:50:13 +00:00
|
|
|
|
2013-08-03 06:25:16 +00:00
|
|
|
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.31.0-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
|
|
2013-07-09 14:05:20 +00:00
|
|
|
* Tue Jul 09 2013 Kamil Dudka <kdudka@redaht.com> 7.31.0-4
|
|
|
|
|
- mention all option listed in 'curl --help' in curl.1 man page
|
|
|
|
|
|
2013-08-12 11:50:13 +00:00
|
|
|
* Tue Jul 02 2013 Kamil Dudka <kdudka@redhat.com> 7.31.0-3
|
2013-07-01 09:41:28 +00:00
|
|
|
- restore the functionality of 'curl -u :'
|
|
|
|
|
|
2013-06-22 19:52:39 +00:00
|
|
|
* Wed Jun 26 2013 Kamil Dudka <kdudka@redhat.com> 7.31.0-2
|
|
|
|
|
- build the curl tool with metalink support
|
|
|
|
|
|
2013-06-22 19:39:26 +00:00
|
|
|
* Sat Jun 22 2013 Kamil Dudka <kdudka@redhat.com> 7.31.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2013-2174)
|
|
|
|
|
|
2013-04-26 14:24:46 +00:00
|
|
|
* Fri Apr 26 2013 Kamil Dudka <kdudka@redhat.com> 7.30.0-2
|
|
|
|
|
- prevent an artificial timeout event due to stale speed-check data (#906031)
|
|
|
|
|
|
2013-04-12 10:13:50 +00:00
|
|
|
* Fri Apr 12 2013 Kamil Dudka <kdudka@redhat.com> 7.30.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2013-1944)
|
2013-04-12 12:19:19 +00:00
|
|
|
- prevent test-suite failure due to using non-default port ranges in tests
|
2013-04-12 10:13:50 +00:00
|
|
|
|
2013-03-12 10:35:18 +00:00
|
|
|
* Tue Mar 12 2013 Kamil Dudka <kdudka@redhat.com> 7.29.0-4
|
|
|
|
|
- do not ignore poll() failures other than EINTR (#919127)
|
2013-03-12 10:36:55 +00:00
|
|
|
- curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)
|
2013-03-12 10:35:18 +00:00
|
|
|
|
2013-03-06 15:22:56 +00:00
|
|
|
* Wed Mar 06 2013 Kamil Dudka <kdudka@redhat.com> 7.29.0-3
|
|
|
|
|
- switch SSL socket into non-blocking mode after handshake
|
2013-03-06 15:24:25 +00:00
|
|
|
- drop the hide_selinux.c hack no longer needed in %%check
|
2013-03-06 15:22:56 +00:00
|
|
|
|
2013-02-22 20:56:26 +00:00
|
|
|
* Fri Feb 22 2013 Kamil Dudka <kdudka@redhat.com> 7.29.0-2
|
|
|
|
|
- fix a SIGSEGV when closing an unused multi handle (#914411)
|
|
|
|
|
|
2013-02-06 12:57:26 +00:00
|
|
|
* Wed Feb 06 2013 Kamil Dudka <kdudka@redhat.com> 7.29.0-1
|
|
|
|
|
- new upstream release (fixes CVE-2013-0249)
|
