Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1607504739201260"
MIME-Version: 1.0
Date: Wed, 9 Dec 2020 09:05:39 +0000
From: "Adam Ciarcinski" <adam@netbsd.org>
Subject: CVS commit: pkgsrc/www/curl
To: pkgsrc-changes@NetBSD.org
Reply-To: adam@netbsd.org
Message-Id: <20201209090539.51490FA9D@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1607504739201260
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	adam
Date:		Wed Dec  9 09:05:39 UTC 2020

Modified Files:
	pkgsrc/www/curl: Makefile PLIST distinfo

Log Message:
curl: updated to 7.74.0

curl and libcurl 7.74.0

This release includes the following changes:
 o hsts: add experimental support for Strict-Transport-Security

This release includes the following bugfixes:
 o CVE-2020-8286: Inferior OCSP verification
 o CVE-2020-8285: FTP wildcard stack overflow
 o CVE-2020-8284: trusting FTP PASV responses
 o acinclude: detect manually set minimum macos/ipod version
 o alt-svc: enable (in the build) by default
 o alt-svc: minimize variable scope and avoid "DEAD_STORE"
 o asyn: use 'struct thread_data *' instead of 'void *'
 o checksrc: warn on empty line before open brace
 o CI/appveyor: disable test 571 in two cmake builds
 o CI/azure: improve on flakiness by avoiding libtool wrappers
 o CI/tests: enable test target on TravisCI for CMake builds
 o CI/travis: add brotli and zstd to the libssh2 build
 o cirrus: build with FreeBSD 12.2 in CirrusCI
 o cmake: call the feature unixsockets without dash
 o cmake: check for linux/tcp.h
 o cmake: correctly handle linker flags for static libs
 o cmake: don't pass -fvisibility=hidden to clang-cl on Windows
 o cmake: don't use reserved target name 'test'
 o cmake: make BUILD_TESTING dependent option
 o cmake: make CURL_ZLIB a tri-state variable
 o cmake: set the unicode feature in curl-config on Windows
 o cmake: store IDN2 information in curl_config.h
 o cmake: use libcurl.rc in all Windows builds
 o configure: pass -pthread to Libs.private for pkg-config
 o configure: use pkgconfig to find openSSL when cross-compiling
 o connect: repair build without ipv6 availability
 o curl.1: add an "OUTPUT" section at the top of the manpage
 o curl.se: new home
 o curl: add compatibility for Amiga and GCC 6.5
 o curl: only warn not fail, if not finding the home dir
 o curl_easy_escape: limit output string length to 3 * max input
 o Curl_pgrsStartNow: init speed limit time stamps at start
 o curl_setup: USE_RESOLVE_ON_IPS is for Apple native resolver use
 o curl_url_set.3: fix typo in the RETURN VALUE section
 o CURLOPT_DNS_USE_GLOBAL_CACHE.3: fix typo
 o CURLOPT_HSTS.3: document the file format
 o CURLOPT_NOBODY.3: fix typo
 o CURLOPT_TCP_NODELAY.3: fix comment in example code
 o CURLOPT_URL.3: clarify SCP/SFTP URLs are for uploads as well
 o docs: document the 8MB input string limit
 o docs: fix typos and markup in ETag manpage sections
 o docs: Fix various typos in documentation
 o examples/httpput: remove use of CURLOPT_PUT
 o FAQ: refreshed
 o file: avoid duplicated code sequence
 o ftp: retry getpeername for FTP with TCP_FASTOPEN
 o gnutls: fix memory leaks (certfields memory wasn't released)
 o header.d: mention the "Transfer-Encoding: chunked" handling
 o HISTORY: the new domain
 o http3: fix two build errors, silence warnings
 o http3: use the master branch of GnuTLS for testing
 o http: pass correct header size to debug callback for chunked post
 o http_proxy: use enum with state names for 'keepon'
 o httpput-postfields.c: new example doing PUT with POSTFIELDS
 o infof/failf calls: fix format specifiers
 o libssh2: fix build with disabled proxy support
 o libssh2: fix transport over HTTPS proxy
 o libssh2: require version 1.0 or later
 o Makefile.m32: add support for HTTP/3 via ngtcp2+nghttp3
 o Makefile.m32: add support for UNICODE builds
 o mqttd: fclose test file when done
 o NEW-PROTOCOL: document what needs to be done to add one
 o ngtcp2: adapt to recent nghttp3 updates
 o ngtcp2: advertise h3 ALPN unconditionally
 o ngtcp2: Fix build error due to symbol name change
 o ngtcp2: use the minimal version of QUIC supported by ngtcp2
 o ntlm: avoid malloc(0) on zero length user and domain
 o openssl: acknowledge SRP disabling in configure properly
 o openssl: free mem_buf in error path
 o openssl: guard against OOM on context creation
 o openssl: use OPENSSL_init_ssl() with >= 1.1.0
 o os400: Sync libcurl API options
 o packages/OS400: make the source code-style compliant
 o quiche: close the connection
 o quiche: remove 'static' from local buffer
 o range.d: clarify that curl will not parse multipart responses
 o range.d: fix typo
 o Revert "multi: implement wait using winsock events"
 o rtsp: error out on empty Session ID, unified the code
 o rtsp: fixed Session ID comparison to refuse prefix
 o rtsp: fixed the RTST Session ID mismatch in test 570
 o runtests: return error if no tests ran
 o runtests: revert the mistaken edit of $CURL
 o runtests: show keywords when no tests ran
 o scripts/completion.pl: parse all opts
 o socks: check for DNS entries with the right port number
 o src/tool_filetime: disable -Wformat on mingw for this file
 o strerror: use 'const' as the string should never be modified
 o test122[12]: remove these two tests
 o test506: make it not run in c-ares builds
 o tests/*server.py: close log file after each log line
 o tests/server/tftpd.c: close upload file right after transfer
 o tests/util.py: fix compatibility with Python 2
 o tests: add missing global_init/cleanup calls
 o tests: fix some http/2 tests for older versions of nghttpx
 o tool_debug_cb: do not assume zero-terminated data
 o tool_help: make "output" description less confusing
 o tool_operate: --retry for HTTP 408 responses too
 o tool_operate: bail out proper on errors during parallel transfers
 o tool_operate: fix compiler warning when --libcurl is disabled
 o tool_writeout: use off_t getinfo-types instead of doubles
 o travis: use ninja-build for CMake builds
 o travis: use valgrind when running tests for debug builds
 o urlapi: don't accept blank port number field without scheme
 o urlapi: URL encode a '+' in the query part
 o urldata: remove 'void *protop' and create the union 'p'
 o vquic/ngtcp2.h: define local_addr as sockaddr_storage


To generate a diff of this commit:
cvs rdiff -u -r1.236 -r1.237 pkgsrc/www/curl/Makefile
cvs rdiff -u -r1.82 -r1.83 pkgsrc/www/curl/PLIST
cvs rdiff -u -r1.166 -r1.167 pkgsrc/www/curl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1607504739201260
Content-Disposition: inline
Content-Length: 2525
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/www/curl/Makefile
diff -u pkgsrc/www/curl/Makefile:1.236 pkgsrc/www/curl/Makefile:1.237
--- pkgsrc/www/curl/Makefile:1.236	Fri Dec  4 20:45:48 2020
+++ pkgsrc/www/curl/Makefile	Wed Dec  9 09:05:39 2020
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.236 2020/12/04 20:45:48 nia Exp $
+# $NetBSD: Makefile,v 1.237 2020/12/09 09:05:39 adam Exp $
 
-DISTNAME=	curl-7.73.0
-PKGREVISION=	1
+DISTNAME=	curl-7.74.0
 CATEGORIES=	www
 MASTER_SITES=	https://curl.haxx.se/download/
 EXTRACT_SUFX=	.tar.xz

Index: pkgsrc/www/curl/PLIST
diff -u pkgsrc/www/curl/PLIST:1.82 pkgsrc/www/curl/PLIST:1.83
--- pkgsrc/www/curl/PLIST:1.82	Sun Oct 18 14:50:45 2020
+++ pkgsrc/www/curl/PLIST	Wed Dec  9 09:05:39 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.82 2020/10/18 14:50:45 wiz Exp $
+@comment $NetBSD: PLIST,v 1.83 2020/12/09 09:05:39 adam Exp $
 bin/curl
 bin/curl-config
 include/curl/curl.h
@@ -173,6 +173,12 @@ man/man3/CURLOPT_HEADER.3
 man/man3/CURLOPT_HEADERDATA.3
 man/man3/CURLOPT_HEADERFUNCTION.3
 man/man3/CURLOPT_HEADEROPT.3
+man/man3/CURLOPT_HSTS.3
+man/man3/CURLOPT_HSTSREADDATA.3
+man/man3/CURLOPT_HSTSREADFUNCTION.3
+man/man3/CURLOPT_HSTSWRITEDATA.3
+man/man3/CURLOPT_HSTSWRITEFUNCTION.3
+man/man3/CURLOPT_HSTS_CTRL.3
 man/man3/CURLOPT_HTTP09_ALLOWED.3
 man/man3/CURLOPT_HTTP200ALIASES.3
 man/man3/CURLOPT_HTTPAUTH.3

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.166 pkgsrc/www/curl/distinfo:1.167
--- pkgsrc/www/curl/distinfo:1.166	Sun Oct 18 14:50:45 2020
+++ pkgsrc/www/curl/distinfo	Wed Dec  9 09:05:39 2020
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.166 2020/10/18 14:50:45 wiz Exp $
+$NetBSD: distinfo,v 1.167 2020/12/09 09:05:39 adam Exp $
 
-SHA1 (curl-7.73.0.tar.xz) = 3afb9616ad14c0a84c016bbc1704dc6d883e7c17
-RMD160 (curl-7.73.0.tar.xz) = abe1391ffc35a7f24771326761bca2f7e46aae41
-SHA512 (curl-7.73.0.tar.xz) = 95330bac2d6bc5306d47723b3c7bdb754fabe2ba2df7b2a8027453a40286f1c7caaee69333f0715e59fbc7fdf09080968ea624398c995cabf3d57493973867bd
-Size (curl-7.73.0.tar.xz) = 2394228 bytes
+SHA1 (curl-7.74.0.tar.xz) = 2bc01055f1a2212ef22f90f026f3a8f9c73d16c1
+RMD160 (curl-7.74.0.tar.xz) = 0bf14d163c5e526886a9a957c743a9c5a738d561
+SHA512 (curl-7.74.0.tar.xz) = 5d987f0b4d051c9e254f14d4e2a05f7cda9fb0f0ac7b3ca3664a25a51ee5ffe092ee072c0d9a613fcd3f34727d75bba14b70f5500cb110ca818591e071c3e6f4
+Size (curl-7.74.0.tar.xz) = 2400972 bytes
 SHA1 (patch-configure) = 8dcc112bd2950e146a77bed7638e490e24a5aa71
 SHA1 (patch-curl-config.in) = a58c777fc1a0a087776e62ed2e2a1e0a339716df


--_----------=_1607504739201260--