[packages/curl] up to 8.12.0 (fixes CVE-2025-0725 CVE-2025-0665 CVE-2025-0167)

atler atler at pld-linux.org
Thu Feb 6 22:50:48 CET 2025


commit baf1d3fb2aa2bc3915b82e4e7e1b0489e3c9dfde
Author: Jan Palus <atler at pld-linux.org>
Date:   Thu Feb 6 22:48:17 2025 +0100

    up to 8.12.0 (fixes CVE-2025-0725 CVE-2025-0665 CVE-2025-0167)

 curl-ac.patch | 16 ++++++++--------
 curl.spec     |  4 ++--
 2 files changed, 10 insertions(+), 10 deletions(-)
---
diff --git a/curl.spec b/curl.spec
index d585805..be82edc 100644
--- a/curl.spec
+++ b/curl.spec
@@ -25,12 +25,12 @@ Summary(pt_BR.UTF-8):	Busca URL (suporta FTP, TELNET, LDAP, GOPHER, DICT, HTTP e
 Summary(ru.UTF-8):	Утилита для получения файлов с серверов FTP, HTTP и других
 Summary(uk.UTF-8):	Утиліта для отримання файлів з серверів FTP, HTTP та інших
 Name:		curl
-Version:	8.11.1
+Version:	8.12.0
 Release:	1
 License:	MIT-like
 Group:		Applications/Networking
 Source0:	https://curl.se/download/%{name}-%{version}.tar.xz
-# Source0-md5:	25e65a5156ca4928060b61cb051813db
+# Source0-md5:	3005f775ce65b301a27f8d43a8c85511
 Patch0:		%{name}-ac.patch
 Patch1:		%{name}-krb5flags.patch
 URL:		https://curl.se/
diff --git a/curl-ac.patch b/curl-ac.patch
index 3d8915c..f34dd49 100644
--- a/curl-ac.patch
+++ b/curl-ac.patch
@@ -1,12 +1,12 @@
 --- curl-8.6.0/configure.ac.orig	2024-02-01 00:31:28.101062850 +0100
 +++ curl-8.6.0/configure.ac	2024-02-01 00:53:46.029103873 +0100
 @@ -1660,7 +1660,8 @@
-     {
-       struct sockaddr_in6 s;
-       (void)s;
--      return socket(AF_INET6, SOCK_STREAM, 0) < 0;
-+      socket(AF_INET6, SOCK_STREAM, 0);
-+      return 0;
-     }
-   ]])
+       {
+         struct sockaddr_in6 s;
+         (void)s;
+-        return socket(AF_INET6, SOCK_STREAM, 0) < 0;
++        socket(AF_INET6, SOCK_STREAM, 0);
++        return 0;
+       }
+     ]])
    ],
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/curl.git/commitdiff/baf1d3fb2aa2bc3915b82e4e7e1b0489e3c9dfde



More information about the pld-cvs-commit mailing list