blob: 363b37de1472a570dc931bab9dd699cee511cffa (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Contributor: Valery Kartel <valery.kartel@gmail.com>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Maintainer: Zach van Rijn <me@zv.io>
pkgname=curl
pkgver=7.79.1
pkgrel=0
pkgdesc="A URL retrival utility and library"
url="https://curl.haxx.se"
arch="all"
license="MIT"
depends="ca-certificates"
makedepends_build="perl"
makedepends_host="zlib-dev openssl-dev libssh2-dev"
makedepends="$makedepends_build $makedepends_host"
source="https://curl.haxx.se/download/$pkgname-$pkgver.tar.xz"
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev libcurl"
# secfixes:
# 7.79.1-r0:
# - CVE-2021-22947
# - CVE-2021-22946
# - CVE-2021-22945
# 7.78.0-r0:
# - CVE-2021-22925
# - CVE-2021-22924
# - CVE-2021-22923
# - CVE-2021-22922
# - CVE-2021-22898
# - CVE-2021-22890
# - CVE-2021-22876
# 7.66.0-r0:
# - CVE-2019-5481
# - CVE-2019-5482
# 7.65.1-r0:
# - CVE-2019-5435
# - CVE-2019-5436
# 7.64.0-r0:
# - CVE-2019-3823
# - CVE-2019-3822
# - CVE-2018-16890
# - CVE-2018-16842
# - CVE-2018-16840
# - CVE-2018-16839
# 7.60.0-r0:
# - CVE-2017-8816
# - CVE-2017-8817
# - CVE-2017-8818
# - CVE-2018-1000005
# - CVE-2018-1000007
# - CVE-2018-1000120
# - CVE-2018-1000121
# - CVE-2018-1000122
# - CVE-2018-1000300
# - CVE-2018-1000301
# 7.56.1-r0:
# - CVE-2017-1000257
# 7.55.0-r0:
# - CVE-2017-1000099
# - CVE-2017-1000100
# - CVE-2017-1000101
# 7.54.0-r0:
# - CVE-2017-7468
# 7.53.1-r2:
# - CVE-2017-7407
# 7.53.0:
# - CVE-2017-2629
# 7.52.1:
# - CVE-2016-9594
# 7.51.0:
# - CVE-2016-8615
# - CVE-2016-8616
# - CVE-2016-8617
# - CVE-2016-8618
# - CVE-2016-8619
# - CVE-2016-8620
# - CVE-2016-8621
# - CVE-2016-8622
# - CVE-2016-8623
# - CVE-2016-8624
# - CVE-2016-8625
# 7.50.3:
# - CVE-2016-7167
# 7.50.2:
# - CVE-2016-7141
# 7.50.1:
# - CVE-2016-5419
# - CVE-2016-5420
# - CVE-2016-5421
# 7.36.0:
# - CVE-2014-0138
# - CVE-2014-0139
build() {
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--enable-ipv6 \
--enable-unix-sockets \
--with-libssh2 \
--without-libidn \
--without-libidn2 \
--disable-ldap \
--with-pic \
--with-openssl
make
}
check() {
# -p: print log contents on test failure
# ignore: 557: fails under valgrind only
make check TFLAGS='-p ~557'
}
package() {
make DESTDIR="$pkgdir" install
}
libcurl() {
pkgdesc="The multiprotocol file transfer library"
mkdir -p "$subpkgdir"/usr
mv "$pkgdir"/usr/lib "$subpkgdir"/usr
}
sha512sums="1edb71647a7f4dbb070baf1a019b4751aefeda793ff523c504410bb5cc74e5bffc52f20dd889697d1585f9ca3c4e81b1a9caadd182c30c8358ffd25f33e4db4d curl-7.79.1.tar.xz"
|
