From f26a5a17d3ef1b38adf3cc486a3ace8c04f87238 Mon Sep 17 00:00:00 2001 From: Sayan Chowdhury Date: Wed, 21 Jul 2021 13:50:05 +0530 Subject: [PATCH] net-misc/curl: Bump curl to 7.78.0 release This releases includes fixes for the following CVEs: - CVE-2021-22924 - CVE-2021-22926 - CVE-2021-22925 The changes are not sync with Gentoo upstream, rather modified in the overlay. The changes are: - 7.78.0 removes metalink support - 7.78.0 remmoves references to darwinssl package Signed-off-by: Sayan Chowdhury --- .../src/third_party/portage-stable/net-misc/curl/Manifest | 2 +- .../curl/{curl-7.77.0-r1.ebuild => curl-7.78.0.ebuild} | 5 +---- 2 files changed, 2 insertions(+), 5 deletions(-) rename sdk_container/src/third_party/portage-stable/net-misc/curl/{curl-7.77.0-r1.ebuild => curl-7.78.0.ebuild} (96%) diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest b/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest index 41fef4c097..65ea300bc2 100644 --- a/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest +++ b/sdk_container/src/third_party/portage-stable/net-misc/curl/Manifest @@ -1 +1 @@ -DIST curl-7.77.0.tar.xz 2439336 BLAKE2B 433b3179dcf2c3363514b72bf9c54286873d8e5559b33e543ba8f3e7df25a619c5be13a8aacb9361c4464b646af4d1fb214d4de57a17f3de7e8f379777214d13 SHA512 aef92a0e3f8ce8491b258a9a1c4dcea3c07c29b139a1f68f08619caa0295cfde76335d2dfb9cdf434525daea7dd05d8acd22f203f5ccc7735bd317964ec1da76 +DIST curl-7.78.0.tar.xz 2440640 BLAKE2B 0422071ce22d38b89652c702989674a2257dd18b05004245c4f2d7494ccdd24b5b52f330629ce6a411a059d5990e8c879cbbdf23d873b881141f9d2b9ad07f7f SHA512 f72e822a0b5e28320ef547c7a441c07f3b4870579a70ab4c428751baba435a1385cb89a22b9ed4b84a7fafecf620f155911e4131e3463ec1bdad80ecde47bb7a diff --git a/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.77.0-r1.ebuild b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.78.0.ebuild similarity index 96% rename from sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.77.0-r1.ebuild rename to sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.78.0.ebuild index 384c325875..9251f21ce0 100644 --- a/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.77.0-r1.ebuild +++ b/sdk_container/src/third_party/portage-stable/net-misc/curl/curl-7.78.0.ebuild @@ -12,7 +12,7 @@ SRC_URI="https://curl.haxx.se/download/${P}.tar.xz" LICENSE="curl" SLOT="0" KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" -IUSE="adns alt-svc brotli +ftp gnutls gopher hsts +http2 idn +imap ipv6 kerberos ldap mbedtls metalink nss +openssl +pop3 +progress-meter rtmp samba +smtp ssh ssl sslv3 static-libs test telnet +tftp threads winssl zstd" +IUSE="adns alt-svc brotli +ftp gnutls gopher hsts +http2 idn +imap ipv6 kerberos ldap mbedtls nss +openssl +pop3 +progress-meter rtmp samba +smtp ssh ssl sslv3 static-libs test telnet +tftp threads winssl zstd" IUSE+=" curl_ssl_gnutls curl_ssl_mbedtls curl_ssl_nss +curl_ssl_openssl curl_ssl_winssl" IUSE+=" nghttp3 quiche" IUSE+=" elibc_Winnt" @@ -64,7 +64,6 @@ RDEPEND="ldap? ( net-nds/openldap[${MULTILIB_USEDEP}] ) idn? ( net-dns/libidn2:0=[static-libs?,${MULTILIB_USEDEP}] ) adns? ( net-dns/c-ares:0[${MULTILIB_USEDEP}] ) kerberos? ( >=virtual/krb5-0-r1[${MULTILIB_USEDEP}] ) - metalink? ( >=media-libs/libmetalink-0.1.1[${MULTILIB_USEDEP}] ) rtmp? ( media-video/rtmpdump[${MULTILIB_USEDEP}] ) ssh? ( net-libs/libssh2[${MULTILIB_USEDEP}] ) sys-libs/zlib[${MULTILIB_USEDEP}] @@ -222,13 +221,11 @@ multilib_src_configure() { --without-bearssl $(use_with brotli) --without-cyassl - --without-darwinssl --without-fish-functions-dir $(use_with http2 nghttp2) --without-hyper $(use_with idn libidn2) $(use_with kerberos gssapi "${EPREFIX}"/usr) - $(use_with metalink libmetalink) --without-libgsasl --without-libpsl $(use_with nghttp3)