CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2023/05/18 07:39:18

Modified files:
        net/curl       : Makefile distinfo 
        net/curl/patches: patch-m4_curl-compilers_m4 
Added files:
        net/curl/patches: patch-lib_vquic_curl_ngtcp2_c 

Log message:
net/curl: security update to 8.1.0

curl(1): add --proxy-http2

Includes fixes for
CVE-2023-28319: UAF in SSH sha256 fingerprint check
CVE-2023-28320: siglongjmp race condition
CVE-2023-28321: IDN wildcard match
CVE-2023-28322: more POST-after-PUT confusion

Some of those affect protocols not enabled in the port.

Reply via email to