Received: by mail.netbsd.org (Postfix, from userid 605) id 3ADFB84EC3; Fri, 16 Mar 2018 21:16:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 3C43E84D3E for ; Fri, 16 Mar 2018 21:16:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id z4V3awAwZu5T for ; Fri, 16 Mar 2018 21:16:19 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id B19C284CEF for ; Fri, 16 Mar 2018 21:16:19 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id AA886FB40; Fri, 16 Mar 2018 21:16:19 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1521234979140030" MIME-Version: 1.0 Date: Fri, 16 Mar 2018 21:16:19 +0000 From: "S.P.Zeidler" Subject: CVS commit: [pkgsrc-2017Q4] pkgsrc/www/curl To: pkgsrc-changes@NetBSD.org Reply-To: spz@netbsd.org X-Mailer: log_accum Message-Id: <20180316211619.AA886FB40@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1521234979140030 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: spz Date: Fri Mar 16 21:16:19 UTC 2018 Modified Files: pkgsrc/www/curl [pkgsrc-2017Q4]: Makefile PLIST distinfo Log Message: Pullup ticket #5721 - requested by maya www/curl: security update Revisions pulled up: - www/curl/Makefile 1.194 - www/curl/PLIST 1.68 - www/curl/distinfo 1.142 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: wiz Date: Wed Mar 14 07:44:24 UTC 2018 Modified Files: pkgsrc/www/curl: Makefile PLIST distinfo Log Message: curl: update to 7.59.0. Curl and libcurl 7.59.0 This release includes the following changes: o curl: add --proxy-pinnedpubkey [10] o added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T [13] o CURLOPT_RESOLVE: Add support for multiple IP addresses per entry [37] o Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS [37] o Add new tool option --happy-eyeballs-timeout-ms [37] o Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA [39] This release includes the following bugfixes: o openldap: check ldap_get_attribute_ber() results for NULL before using [50] o FTP: reject path components with control codes [51] o readwrite: make sure excess reads don't go beyond buffer end [52] o lib555: drop text conversion and encode data as ascii codes [1] o lib517: make variable static to avoid compiler warning o lib544: sync ascii code data with textual data [1] o GSKit: restore pinnedpubkey functionality [2] o darwinssl: Don't import client certificates into Keychain on macOS [3] o parsedate: fix date parsing for systems with 32 bit long [4] o openssl: fix pinned public key build error in FIPS mode [5] o SChannel/WinSSL: Implement public key pinning [6] o cookies: remove verbose "cookie size:" output o progress-bar: don't use stderr explicitly, use bar->out [7] o Fixes for MSDOS o build: open VC15 projects with VS 2017 o curl_ctype: private is*() type macros and functions [8] o configure: set PATH_SEPARATOR to colon for PATH w/o separator [9] o winbuild: make linker generate proper PDB [11] o curl_easy_reset: clear digest auth state [12] o curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6 [14] o range: commonize FTP and FILE range handling [15] o progress-bar docs: update to match implementation [16] o fnmatch: do not match the empty string with a character set o fnmatch: accept an alphanum to be followed by a non-alphanum in char set [17] o build: fix termios issue on android cross-compile [18] o getdate: return -1 for out of range [19] o formdata: use the mime-content type function [20] o time-cond: fix reading the file modification time on Windows [21] o build-openssl.bat: Extend VC15 support to include Enterprise and Professional o build-wolfssl.bat: Extend VC15 support to include Enterprise and Professional o openssl: Don't add verify locations when verifypeer=0 o fnmatch: optimize processing of consecutive *s and ?s pattern characters [22] o schannel: fix compiler warnings [23] o content_encoding: Add "none" alias to "identity" [24] o get_posix_time: only check for overflows if they can happen o http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING [25] o README: language fix [26] o sha256: build with OpenSSL < 0.9.8 [27] o smtp: fix processing of initial dot in data [28] o --tlsauthtype: works only if libcurl is built with TLS-SRP support [29] o tests: new tests for http raw mode [30] o libcurl-security.3: man page discussion security concerns when using libcurl o curl_gssapi: make sure this file too uses our *printf() o BINDINGS: fix curb link (and remove ruby-curl-multi) o nss: use PK11_CreateManagedGenericObject() if available [31] o travis: add build with iconv enabled [32] o ssh: add two missing state names [33] o CURLOPT_HEADERFUNCTION.3: mention folded headers o http: fix the max header length detection logic [34] o header callback: don't chop headers into smaller pieces [35] o CURLOPT_HEADER.3: clarify problems with different data sizes o curl --version: show PSL if the run-time lib has it enabled o examples/sftpuploadresume: resume upload via CURLOPT_APPEND [36] o Return error if called recursively from within callbacks [38] o sasl: prefer PLAIN mechanism over LOGIN o winbuild: Use CALL to run batch scripts [40] o curl_share_setopt.3: connection cache is shared within multi handles o winbuild: Use macros for the names of some build utilities [41] o projects/README: remove reference to dead IDN link/package [42] o lib655: silence compiler warning [43] o configure: Fix version check for OpenSSL 1.1.1 o docs/MANUAL: formfind.pl is not accessible on the site anymore [44] o unit1309: fix warning on Windows x64 [45] o unit1307: proper cleanup on OOM to fix torture tests o curl_ctype: fix macro redefinition warnings o build: get CFLAGS (including -werror) used for examples and tests [46] o NO_PROXY: fix for IPv6 numericals in the URL [47] o krb5: use nondeprecated functions [48] o winbuild: prefer documented zlib library names [49] o http2: mark the connection for close on GOAWAY [53] o limit-rate: kick in even before "limit" data has been received [54] o HTTP: allow "header;" to replace an internal header with a blank one [55] o http2: verbose output new MAX_CONCURRENT_STREAMS values o SECURITY: distros' max embargo time is 14 days o curl tool: accept --compressed also if Brotli is enabled and zlib is not o WolfSSL: adding TLSv1.3 [56] o checksrc.pl: add -i and -m options o CURLOPT_COOKIEFILE.3: "-" as file name means stdin To generate a diff of this commit: cvs rdiff -u -r1.193 -r1.194 pkgsrc/www/curl/Makefile cvs rdiff -u -r1.67 -r1.68 pkgsrc/www/curl/PLIST cvs rdiff -u -r1.141 -r1.142 pkgsrc/www/curl/distinfo To generate a diff of this commit: cvs rdiff -u -r1.190.2.1 -r1.190.2.2 pkgsrc/www/curl/Makefile cvs rdiff -u -r1.66.2.1 -r1.66.2.2 pkgsrc/www/curl/PLIST cvs rdiff -u -r1.140.2.1 -r1.140.2.2 pkgsrc/www/curl/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1521234979140030 Content-Disposition: inline Content-Length: 3657 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/curl/Makefile diff -u pkgsrc/www/curl/Makefile:1.190.2.1 pkgsrc/www/curl/Makefile:1.190.2.2 --- pkgsrc/www/curl/Makefile:1.190.2.1 Wed Jan 24 19:43:13 2018 +++ pkgsrc/www/curl/Makefile Fri Mar 16 21:16:19 2018 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.190.2.1 2018/01/24 19:43:13 bsiegert Exp $ +# $NetBSD: Makefile,v 1.190.2.2 2018/03/16 21:16:19 spz Exp $ -DISTNAME= curl-7.58.0 +DISTNAME= curl-7.59.0 CATEGORIES= www MASTER_SITES= https://curl.haxx.se/download/ EXTRACT_SUFX= .tar.bz2 Index: pkgsrc/www/curl/PLIST diff -u pkgsrc/www/curl/PLIST:1.66.2.1 pkgsrc/www/curl/PLIST:1.66.2.2 --- pkgsrc/www/curl/PLIST:1.66.2.1 Wed Jan 24 19:43:13 2018 +++ pkgsrc/www/curl/PLIST Fri Mar 16 21:16:19 2018 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.66.2.1 2018/01/24 19:43:13 bsiegert Exp $ +@comment $NetBSD: PLIST,v 1.66.2.2 2018/03/16 21:16:19 spz Exp $ bin/curl bin/curl-config include/curl/curl.h @@ -26,6 +26,7 @@ man/man3/CURLINFO_CONTENT_TYPE.3 man/man3/CURLINFO_COOKIELIST.3 man/man3/CURLINFO_EFFECTIVE_URL.3 man/man3/CURLINFO_FILETIME.3 +man/man3/CURLINFO_FILETIME_T.3 man/man3/CURLINFO_FTP_ENTRY_PATH.3 man/man3/CURLINFO_HEADER_SIZE.3 man/man3/CURLINFO_HTTPAUTH_AVAIL.3 @@ -147,6 +148,7 @@ man/man3/CURLOPT_FTP_USE_EPRT.3 man/man3/CURLOPT_FTP_USE_EPSV.3 man/man3/CURLOPT_FTP_USE_PRET.3 man/man3/CURLOPT_GSSAPI_DELEGATION.3 +man/man3/CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS.3 man/man3/CURLOPT_HEADER.3 man/man3/CURLOPT_HEADERDATA.3 man/man3/CURLOPT_HEADERFUNCTION.3 @@ -252,6 +254,8 @@ man/man3/CURLOPT_REDIR_PROTOCOLS.3 man/man3/CURLOPT_REFERER.3 man/man3/CURLOPT_REQUEST_TARGET.3 man/man3/CURLOPT_RESOLVE.3 +man/man3/CURLOPT_RESOLVER_START_DATA.3 +man/man3/CURLOPT_RESOLVER_START_FUNCTION.3 man/man3/CURLOPT_RESUME_FROM.3 man/man3/CURLOPT_RESUME_FROM_LARGE.3 man/man3/CURLOPT_RTSP_CLIENT_CSEQ.3 @@ -313,6 +317,7 @@ man/man3/CURLOPT_TIMECONDITION.3 man/man3/CURLOPT_TIMEOUT.3 man/man3/CURLOPT_TIMEOUT_MS.3 man/man3/CURLOPT_TIMEVALUE.3 +man/man3/CURLOPT_TIMEVALUE_LARGE.3 man/man3/CURLOPT_TLSAUTH_PASSWORD.3 man/man3/CURLOPT_TLSAUTH_TYPE.3 man/man3/CURLOPT_TLSAUTH_USERNAME.3 @@ -400,6 +405,7 @@ man/man3/libcurl-easy.3 man/man3/libcurl-env.3 man/man3/libcurl-errors.3 man/man3/libcurl-multi.3 +man/man3/libcurl-security.3 man/man3/libcurl-share.3 man/man3/libcurl-symbols.3 man/man3/libcurl-thread.3 Index: pkgsrc/www/curl/distinfo diff -u pkgsrc/www/curl/distinfo:1.140.2.1 pkgsrc/www/curl/distinfo:1.140.2.2 --- pkgsrc/www/curl/distinfo:1.140.2.1 Wed Jan 24 19:43:13 2018 +++ pkgsrc/www/curl/distinfo Fri Mar 16 21:16:19 2018 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.140.2.1 2018/01/24 19:43:13 bsiegert Exp $ +$NetBSD: distinfo,v 1.140.2.2 2018/03/16 21:16:19 spz Exp $ -SHA1 (curl-7.58.0.tar.bz2) = 42fff9f33ad4ed9e797ee1e7c0a3cda7f8dff7ff -RMD160 (curl-7.58.0.tar.bz2) = 61d5e9f5165f4bbeac3b81de55f27561d90a7c86 -SHA512 (curl-7.58.0.tar.bz2) = 853b945fbfe87e8dcf2186d8cc6609681b9ed3727f9f075bb434d5df07dcccc633fdf30795f6d5956e3355a5cf94a3780e4a3603b08cbd0368e44103de27085b -Size (curl-7.58.0.tar.bz2) = 2891868 bytes +SHA1 (curl-7.59.0.tar.bz2) = 0dd78aa857342b85b90bd6b0a53f6aee3516cb13 +RMD160 (curl-7.59.0.tar.bz2) = 48e5c291285d46753e4bab1c720c98dc91a0a16f +SHA512 (curl-7.59.0.tar.bz2) = 9b5586f443a3c9fed947debce86861a8dea0fbf59bf8838cfd72a0884f13073630cf9d369b5535a059d122decd738c652705567752517f5cb11148cc16f693fb +Size (curl-7.59.0.tar.bz2) = 2904158 bytes SHA1 (patch-configure) = ba8abac55f11a53d07235e57d21ce5b32a421902 SHA1 (patch-curl-config.in) = 363359665985cc14f36ddf47fc3480f1200e3533 SHA1 (patch-lib_hostcheck.c) = 8e772d3f91cdafae17281cc19004269ece0cf308 --_----------=_1521234979140030--