ports/core (3.5): [notify] curl: updated to 7.61.0 Fix for CVE-2018-0500

crux at crux.nu crux at crux.nu
Tue Oct 23 15:54:29 UTC 2018


commit eac4f1a249cae98e1f70ea9c8e520350a789c482
Author: Fredrik Rinnestam <fredrik at crux.nu>
Date:   Wed Jul 11 21:29:38 2018 +0200

    [notify] curl: updated to 7.61.0 Fix for CVE-2018-0500
    
    https://curl.haxx.se/docs/adv_2018-70a2.html

diff --git a/curl/.footprint b/curl/.footprint
index 6e9a1ba5..96355a75 100644
--- a/curl/.footprint
+++ b/curl/.footprint
@@ -30,9 +30,11 @@ drwxr-xr-x	root/root	usr/share/man/man1/
 drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_ACTIVESOCKET.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_APPCONNECT_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_APPCONNECT_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CERTINFO.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONDITION_UNMET.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONNECT_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONNECT_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONTENT_LENGTH_DOWNLOAD.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_CONTENT_LENGTH_UPLOAD.3.gz
@@ -51,9 +53,11 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_LOCAL_IP.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_LOCAL_PORT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_NAMELOOKUP_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_NAMELOOKUP_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_NUM_CONNECTS.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_OS_ERRNO.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PRETRANSFER_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PRETRANSFER_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PRIMARY_IP.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PRIMARY_PORT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PRIVATE.3.gz
@@ -62,6 +66,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_PROXY_SSL_VERIFYRESULT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_REDIRECT_COUNT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_REDIRECT_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_REDIRECT_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_REDIRECT_URL.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_REQUEST_SIZE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_RESPONSE_CODE.3.gz
@@ -81,9 +86,11 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_SSL_ENGINES.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_SSL_VERIFYRESULT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_STARTTRANSFER_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_STARTTRANSFER_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_TLS_SESSION.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_TLS_SSL_PTR.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLINFO_TOTAL_TIME.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLINFO_TOTAL_TIME_T.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLMOPT_MAXCONNECTS.3.gz
@@ -134,6 +141,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DEBUGFUNCTION.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DEFAULT_PROTOCOL.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DIRLISTONLY.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DISALLOW_USERNAME_IN_URL.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DNS_CACHE_TIMEOUT.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DNS_INTERFACE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_DNS_LOCAL_IP4.3.gz
@@ -257,6 +265,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_SSL_VERIFYHOST.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_SSL_VERIFYPEER.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_TLS13_CIPHERS.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_PASSWORD.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_TYPE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_USERNAME.3.gz
@@ -335,6 +344,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TIMEOUT_MS.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TIMEVALUE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TIMEVALUE_LARGE.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TLS13_CIPHERS.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TLSAUTH_PASSWORD.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TLSAUTH_TYPE.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/CURLOPT_TLSAUTH_USERNAME.3.gz
diff --git a/curl/.md5sum b/curl/.md5sum
deleted file mode 100644
index 653ed3b3..00000000
--- a/curl/.md5sum
+++ /dev/null
@@ -1 +0,0 @@
-a889cd11b4ae8794b7030472cb4df0a0  curl-7.60.0.tar.xz
diff --git a/curl/.signature b/curl/.signature
index 5475cd50..aecb2b42 100644
--- a/curl/.signature
+++ b/curl/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/core.pub
-RWRJc1FUaeVeqv/TlEJXXUnyrZyRHlmlwhHDBNaRlvi13i0lnHeyyJkFquLRRi6nMqXWgIxew7ArJEKyh3QNdUZCHghw97oq+Q8=
-SHA256 (Pkgfile) = dc59b1a6405353512b2be82cd6db799158c5a17addb8b7d8d01bfb3594c06295
-SHA256 (.footprint) = ad702c8c3a24f4a67430def445bb3bac323c2f6118a1ba1208c3e9e10f0fce6b
-SHA256 (curl-7.60.0.tar.xz) = 8736ff8ded89ddf7e926eec7b16f82597d029fc1469f3a551f1fafaac164e6a0
+RWRJc1FUaeVeqi3s40coBO30bKNndDMUXkz0VmOJB4u3iu9/M6RP8wnH4RSz1eJKdiaws6jKywswddK8hao1W+inne7S+5ZSUgQ=
+SHA256 (Pkgfile) = f6a5fa4fecf54130209e420aab79f6330e296deccf1ac77625eea68e9458b20e
+SHA256 (.footprint) = 90b5b2c43afeebb4290f9e3e02cce89c5134d989c4224d0e37b800dec441dc4b
+SHA256 (curl-7.61.0.tar.xz) = ef6e55192d04713673b4409ccbcb4cb6cd723137d6e10ca45b0c593a454e1720
diff --git a/curl/Pkgfile b/curl/Pkgfile
index 0f5c4e7d..881523fd 100644
--- a/curl/Pkgfile
+++ b/curl/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on:  openssl, zlib
 
 name=curl
-version=7.60.0
+version=7.61.0
 release=1
 source=(http://curl.haxx.se/download/$name-$version.tar.xz)
 


More information about the CRUX mailing list