Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package curl for openSUSE:Factory checked in at 2021-03-12 13:30:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/curl (Old) and /work/SRC/openSUSE:Factory/.curl.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "curl" Fri Mar 12 13:30:37 2021 rev:164 rq:878385 version:7.75.0 Changes: -------- --- /work/SRC/openSUSE:Factory/curl/curl.changes 2020-12-23 14:21:08.265719718 +0100 +++ /work/SRC/openSUSE:Factory/.curl.new.2401/curl.changes 2021-03-12 13:30:51.730119017 +0100 @@ -1,0 +2,41 @@ +Thu Mar 4 17:46:40 UTC 2021 - Cristian Rodr??guez <[email protected]> + +- Harden build, enable full RELRO +- Never allow undefined symbols anywhere. + +------------------------------------------------------------------- +Thu Feb 4 11:20:22 UTC 2021 - Pedro Monreal <[email protected]> + +- Update to 7.75.0 + * Changes: + - curl: add --create-file-mode [mode] + - curl: add new variables to --write-out + - dns: extend CURLOPT_RESOLVE syntax for adding non-permanent entries + - gopher: implement secure gopher protocol + - http: add Hyper as new optional HTTP backend + - http: introduce AWS HTTP v4 Signature support + * Bugfixes: + - cmake: Add an option to disable libidn2 + - cmake: enable gophers correctly in curl-config + - cmake: expose CURL_DISABLE_OPENSSL_AUTO_LOAD_CONFIG + - digest_sspi: Show InitializeSecurityContext errors in verbose mode + - getinfo: build with disabled HTTP support + - http: get CURLOPT_REQUEST_TARGET working with a HTTP proxy + - http_proxy: Fix CONNECT chunked encoding race condition + - httpauth: make multi-request auth work with custom port + - lib: pass in 'struct Curl_easy *' to most functions + - lib: remove Curl_ prefix from many static functions + - lib: save a bit of space with some structure packing + - libssh: avoid plain free() of libssh-memory + - mime: make sure setting MIMEPOST to NULL resets properly + - multi_runsingle: bail out early on data->conn == NULL + - ngtcp2: Fix http3 upload stall + - ngtcp2: Fix stack buffer overflow + - openssl: lowercase the hostname before using it for SNI + - socks: use the download buffer instead + - speedcheck: exclude paused transfers + - too??_writeout: fix the -w time output units + - url: if IDNA conversion fails, fallback to Transitional +- Refresh libcurl-ocloexec.patch + +------------------------------------------------------------------- Old: ---- curl-7.74.0.tar.xz curl-7.74.0.tar.xz.asc New: ---- curl-7.75.0.tar.xz curl-7.75.0.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ curl.spec ++++++ --- /var/tmp/diff_new_pack.oOHPmF/_old 2021-03-12 13:30:52.750120447 +0100 +++ /var/tmp/diff_new_pack.oOHPmF/_new 2021-03-12 13:30:52.754120453 +0100 @@ -1,7 +1,7 @@ # # spec file for package curl # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,7 +21,7 @@ # need ssl always for python-pycurl %bcond_without openssl Name: curl -Version: 7.74.0 +Version: 7.75.0 Release: 0 Summary: A Tool for Transferring Data from URLs License: curl @@ -102,7 +102,7 @@ CFLAGS=$(echo "%{optflags}" | sed -e 's/-D_FORTIFY_SOURCE=2//') export CPPFLAGS export CFLAGS="$CFLAGS -fPIE" -export LDFLAGS="$LDFLAGS -pie" +export LDFLAGS="$LDFLAGS -Wl,-z,defs,-z,now,-z,relro -pie" autoreconf -fiv # local hack to make curl-config --libs stop printing libraries it depends on # (currently, libtool sets link_all_deplibs=(yes|unknown) everywhere, ++++++ curl-7.74.0.tar.xz -> curl-7.75.0.tar.xz ++++++ ++++ 80167 lines of diff (skipped) ++++++ libcurl-ocloexec.patch ++++++ --- /var/tmp/diff_new_pack.oOHPmF/_old 2021-03-12 13:30:54.182122457 +0100 +++ /var/tmp/diff_new_pack.oOHPmF/_new 2021-03-12 13:30:54.182122457 +0100 @@ -7,11 +7,11 @@ compile time is not enough. -Index: curl-7.69.0/lib/file.c +Index: curl-7.75.0/lib/file.c =================================================================== ---- curl-7.69.0.orig/lib/file.c -+++ curl-7.69.0/lib/file.c -@@ -192,7 +192,7 @@ static CURLcode file_connect(struct conn +--- curl-7.75.0.orig/lib/file.c ++++ curl-7.75.0/lib/file.c +@@ -193,7 +193,7 @@ static CURLcode file_connect(struct Curl return CURLE_URL_MALFORMAT; } @@ -20,19 +20,19 @@ file->path = real_path; #endif file->freepath = real_path; /* free this when done */ -@@ -285,7 +285,7 @@ static CURLcode file_upload(struct conne +@@ -277,7 +277,7 @@ static CURLcode file_upload(struct Curl_ else mode = MODE_DEFAULT|O_TRUNC; -- fd = open(file->path, mode, conn->data->set.new_file_perms); -+ fd = open(file->path, mode | O_CLOEXEC, conn->data->set.new_file_perms); +- fd = open(file->path, mode, data->set.new_file_perms); ++ fd = open(file->path, mode | O_CLOEXEC, data->set.new_file_perms); if(fd < 0) { failf(data, "Can't open %s for writing", file->path); return CURLE_WRITE_ERROR; -Index: curl-7.69.0/lib/hostip6.c +Index: curl-7.75.0/lib/hostip6.c =================================================================== ---- curl-7.69.0.orig/lib/hostip6.c -+++ curl-7.69.0/lib/hostip6.c +--- curl-7.75.0.orig/lib/hostip6.c ++++ curl-7.75.0/lib/hostip6.c @@ -44,7 +44,7 @@ #ifdef HAVE_PROCESS_H #include <process.h> @@ -42,7 +42,7 @@ #include "urldata.h" #include "sendf.h" #include "hostip.h" -@@ -76,7 +76,7 @@ bool Curl_ipv6works(struct connectdata * +@@ -75,7 +75,7 @@ bool Curl_ipv6works(struct Curl_easy *da else { int ipv6_works = -1; /* probe to see if we have a working IPv6 stack */ @@ -51,11 +51,11 @@ if(s == CURL_SOCKET_BAD) /* an IPv6 address was requested but we can't get/use one */ ipv6_works = 0; -Index: curl-7.69.0/lib/if2ip.c +Index: curl-7.75.0/lib/if2ip.c =================================================================== ---- curl-7.69.0.orig/lib/if2ip.c -+++ curl-7.69.0/lib/if2ip.c -@@ -201,7 +201,7 @@ if2ip_result_t Curl_if2ip(int af, unsign +--- curl-7.75.0.orig/lib/if2ip.c ++++ curl-7.75.0/lib/if2ip.c +@@ -202,7 +202,7 @@ if2ip_result_t Curl_if2ip(int af, unsign if(len >= sizeof(req.ifr_name)) return IF2IP_NOT_FOUND; @@ -64,11 +64,11 @@ if(CURL_SOCKET_BAD == dummy) return IF2IP_NOT_FOUND; -Index: curl-7.69.0/lib/connect.c +Index: curl-7.75.0/lib/connect.c =================================================================== ---- curl-7.69.0.orig/lib/connect.c -+++ curl-7.69.0/lib/connect.c -@@ -1529,7 +1529,9 @@ CURLcode Curl_socket(struct connectdata +--- curl-7.75.0.orig/lib/connect.c ++++ curl-7.75.0/lib/connect.c +@@ -1575,7 +1575,9 @@ CURLcode Curl_socket(struct Curl_easy *d } else /* opensocket callback not set, so simply create the socket now */ @@ -79,11 +79,11 @@ if(*sockfd == CURL_SOCKET_BAD) /* no socket, no connection */ -Index: curl-7.69.0/configure.ac +Index: curl-7.75.0/configure.ac =================================================================== ---- curl-7.69.0.orig/configure.ac -+++ curl-7.69.0/configure.ac -@@ -196,6 +196,8 @@ AC_DEFINE_UNQUOTED(OS, "${host}", [cpu-m +--- curl-7.75.0.orig/configure.ac ++++ curl-7.75.0/configure.ac +@@ -189,6 +189,8 @@ AC_DEFINE_UNQUOTED(OS, "${host}", [cpu-m # Silence warning: ar: 'u' modifier ignored since 'D' is the default AC_SUBST(AR_FLAGS, [cr])
