openbsd/ports
1
0
Fork 0
mirror of https://github.com/openbsd/ports.git synced 2026-06-17 23:13:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

net/curl: update to 8.20.0

Browse Source 
Changes:
* drop support for SMB

Includes fixes for
CVE-2026-4873: connection reuse ignores TLS requirement
CVE-2026-5545: wrong reuse of HTTP Negotiate connection
CVE-2026-5773: wrong reuse of SMB connection
CVE-2026-6253: proxy credentials leak over redirect-to proxy
CVE-2026-6276: stale custom cookie host causes cookie leak
CVE-2026-6429: netrc credential leak with reused proxy connection
CVE-2026-7168: cross-proxy Digest auth state leak
This commit is contained in:
naddy
2026-05-06 13:52:52 +00:00
parent 9ccdd5213a
commit 29f5f32463
4 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
net/curl/Makefile
+4 -2
View File
@@ -1,7 +1,7 @@
COMMENT= transfer files with FTP, HTTP, HTTPS, etc.
DISTNAME= curl-8.19.0
SHARED_LIBS= curl 26.34 # 12.0
DISTNAME= curl-8.20.0
SHARED_LIBS= curl 26.35 # 12.0
CATEGORIES= net
HOMEPAGE= https://curl.se/
@@ -32,6 +32,8 @@ CONFIGURE_ARGS= --disable-ldap \
--without-zstd \
--with-zsh-functions-dir \
--with-fish-functions-dir
# disabled by default, enable in -stable
#CONFIGURE_ARGS+=--enable-ntlm --enable-smb
DEBUG_PACKAGES= ${BUILD_PACKAGES}
net/curl/distinfo
+2 -2
View File
@@ -1,2 +1,2 @@
SHA256 (curl-8.19.0.tar.xz) = TrQUiXkNGeGQ16x+GOgoV83Wivj05mspLO1WLTM/Ed8=
SIZE (curl-8.19.0.tar.xz) = 2787584
SHA256 (curl-8.20.0.tar.xz) = Y/4twUi6DOromSLvg49+XJRicsLni3xZ+rS3nTziuJY=
SIZE (curl-8.20.0.tar.xz) = 2834456
net/curl/patches/patch-m4_curl-compilers_m4
+2 -2
View File
@@ -9,12 +9,12 @@ Do not override optimization flags in CFLAGS.
Index: m4/curl-compilers.m4
--- m4/curl-compilers.m4.orig
+++ m4/curl-compilers.m4
@@ -711,7 +711,7 @@ AC_DEFUN([CURL_SET_COMPILER_OPTIMIZE_OPTS], [
@@ -709,7 +709,7 @@ AC_DEFUN([CURL_SET_COMPILER_OPTIMIZE_OPTS], [
tmp_options=""
tmp_CFLAGS="$CFLAGS"
tmp_CPPFLAGS="$CPPFLAGS"
- honor_optimize_option="yes"
+ honor_optimize_option="no"
#
dnl If optimization request setting has not been explicitly specified,
dnl it has been derived from the debug setting and initially assumed.
net/curl/pkg/PLIST
+3
View File
@@ -82,6 +82,7 @@ lib/pkgconfig/libcurl.pc
@man man/man3/CURLINFO_RTSP_SERVER_CSEQ.3
@man man/man3/CURLINFO_RTSP_SESSION_ID.3
@man man/man3/CURLINFO_SCHEME.3
@man man/man3/CURLINFO_SIZE_DELIVERED.3
@man man/man3/CURLINFO_SIZE_DOWNLOAD.3
@man man/man3/CURLINFO_SIZE_DOWNLOAD_T.3
@man man/man3/CURLINFO_SIZE_UPLOAD.3
@@ -120,6 +121,8 @@ lib/pkgconfig/libcurl.pc
@man man/man3/CURLMOPT_PIPELINING_SITE_BL.3
@man man/man3/CURLMOPT_PUSHDATA.3
@man man/man3/CURLMOPT_PUSHFUNCTION.3
@man man/man3/CURLMOPT_QUICK_EXIT.3
@man man/man3/CURLMOPT_RESOLVE_THREADS_MAX.3
@man man/man3/CURLMOPT_SOCKETDATA.3
@man man/man3/CURLMOPT_SOCKETFUNCTION.3
@man man/man3/CURLMOPT_TIMERDATA.3