openbsd-ports/net/curl/Makefile

# $OpenBSD: Makefile,v 1.142 2019/03/30 03:18:12 naddy Exp $

COMMENT=	get files from FTP, Gopher, HTTP or HTTPS servers

DISTNAME=	curl-7.64.1
SHARED_LIBS=	curl                 25.21    # 9.0
CATEGORIES=	net
HOMEPAGE=	https://curl.haxx.se/

MAINTAINER=	Christian Weisgerber <naddy@openbsd.org>

# MIT
PERMIT_PACKAGE_CDROM=	Yes

MASTER_SITES=	https://curl.haxx.se/download/
EXTRACT_SUFX=	.tar.xz

LIB_DEPENDS=	www/nghttp2
WANTLIB=	c crypto pthread nghttp2 ssl z

AUTOCONF_VERSION=2.69
CONFIGURE_STYLE=autoconf
# Beware of circular dependency curl -> brotli -> cmake -> curl
CONFIGURE_ARGS=	--with-ca-bundle=/etc/ssl/cert.pem \
		--without-brotli \
		--without-libidn2 \
		--without-libpsl \
		--without-libssh \
		--without-libssh2
CONFIGURE_ENV=	ac_cv_path_NROFF="/usr/bin/mandoc -Tascii"

# speed up some time-consuming configure tests
CONFIGURE_ENV+= \
    curl_cv_func_select_args="int,fd_set *,struct timeval *,int" \
    curl_cv_func_recv_args="int,void *,size_t,int,ssize_t" \
    curl_cv_func_send_args="int,const void *,size_t,int,ssize_t"

# Note:
# use ulimit -p 256 for test

# runsshserver: sshserver.pl --user=$USER
TEST_ENV=	USER=$$USER

.include <bsd.port.mk>
Maintenance update to curl 7.64.1 for numerous bug fixes. No security vulnerabilities have been announced. 2019-03-30 03:18:12 +00:00			`# $OpenBSD: Makefile,v 1.142 2019/03/30 03:18:12 naddy Exp $`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
Remove surrounding quotes in COMMENT/PERMIT_/BROKEN/ERRORS Add $OpenBSD$ to p5-SNMP-Info/Makefile (ok kili@, simon@) 2007-09-15 22:36:51 +00:00			`COMMENT= get files from FTP, Gopher, HTTP or HTTPS servers`
upgrade to Curl 7.7 -- From: Pete Fritchman <petef@databits.net> 2001-03-30 18:40:59 +00:00
Maintenance update to curl 7.64.1 for numerous bug fixes. No security vulnerabilities have been announced. 2019-03-30 03:18:12 +00:00			`DISTNAME= curl-7.64.1`
			`SHARED_LIBS= curl 25.21 # 9.0`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00			`CATEGORIES= net`
update HOMEPAGE and MASTER_SITES 2016-02-27 21:55:51 +00:00			`HOMEPAGE= https://curl.haxx.se/`
upgrade to Curl 6.5 2000-03-14 22:38:19 +00:00
maintenance update to 7.14.0 and take maintainer 2005-05-26 23:13:28 +00:00			`MAINTAINER= Christian Weisgerber <naddy@openbsd.org>`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
upgrade to cURL 7.10.2 2002-11-24 03:40:08 +00:00			`# MIT`
upgrade to Curl 6.5 2000-03-14 22:38:19 +00:00			`PERMIT_PACKAGE_CDROM= Yes`

Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`MASTER_SITES= https://curl.haxx.se/download/`
Security update to 7.55.0: * file: output the correct buffer to the user (CVE-2017-1000099) * tftp: reject file name lengths that don't fit (CVE-2017-1000100) * glob: do not parse after a strtoul() overflow range (CVE-2017-1000101) 2017-08-10 19:46:26 +00:00			`EXTRACT_SUFX= .tar.xz`
Security update to 7.38.0. Fixes CVE-2014-3613 (libcurl cookie leak with IP address as domain) CVE-2014-3620 (libcurl cookie leak for TLDs) Also switch to .lzma distfile. 2014-09-11 18:00:45 +00:00
Security update to 7.51.0. CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host Note that this drops support for internationalized domain names. ok sthen@ 2016-11-04 11:33:33 +00:00			`LIB_DEPENDS= www/nghttp2`
Update to 7.55.1. Note that this enables the multithreaded resolver by default and now links with pthread. 2017-08-31 19:34:16 +00:00			`WANTLIB= c crypto pthread nghttp2 ssl z`
SECURITY: Update to 7.15.0. libcurl's NTLM function could overflow a stack-based buffer if given a too long user name or domain name. CAN-2005-3185. 2005-10-16 15:31:39 +00:00
Don't interfere with debugging (-g) and optimization (-O) flags. The curl configure script wants to take control of the compiler flags for optimization and debugging. The actual interactions are more complex, but the gist is that the flags are stripped from CFLAGS, and if --enable-optimize or --enable-debug are specified, an approved optimization or debugging flag is added. report/ok bentley@ 2019-02-11 20:34:39 +00:00			`AUTOCONF_VERSION=2.69`
			`CONFIGURE_STYLE=autoconf`
Security update to 7.57.0. Fixes: CVE-2017-8816: NTLM buffer overflow via integer overflow CVE-2017-8817: FTP wildcard out of bounds read CVE-2017-8818: SSL out of buffer access 2017-12-01 21:02:23 +00:00			`# Beware of circular dependency curl -> brotli -> cmake -> curl`
garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00			`CONFIGURE_ARGS= --with-ca-bundle=/etc/ssl/cert.pem \`
Security update to 7.57.0. Fixes: CVE-2017-8816: NTLM buffer overflow via integer overflow CVE-2017-8817: FTP wildcard out of bounds read CVE-2017-8818: SSL out of buffer access 2017-12-01 21:02:23 +00:00			`--without-brotli \`
SECURITY update to 7.53.1: CVE-2017-2629: make SSL_VERIFYSTATUS work again Also numerous other bug fixes. 2017-02-24 21:08:28 +00:00			`--without-libidn2 \`
Update to 7.47.0. Fixes CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use 2016-01-29 23:52:24 +00:00			`--without-libpsl \`
Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`--without-libssh \`
- update to 7.16.2 - enable IDN support 2007-05-13 17:08:25 +00:00			`--without-libssh2`
Usually, ports Makefiles should not explicitly call mandoc or groff but leave the formatting to pkg_create(1) if needed. In the special cases where they do need to call mandoc (for example, like in this case, to include a formatted manual into a binary program) they should pass the -Tascii option to avoid depending on the user's locale, since mandoc -Tlocale will soon be the default. In this case, it isn't strictly needed because the upstream Makefile uses "env LC_ALL=C" when calling groff/mandoc. But let's avoid the fragility of depending on that, and let's avoid setting a bad example. No package change, no bump. ok naddy@ (MAINTAINER) 2014-11-30 16:44:04 +00:00			`CONFIGURE_ENV= ac_cv_path_NROFF="/usr/bin/mandoc -Tascii"`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
Speed up some time-consuming configure tests. ok naddy 2011-12-10 17:28:13 +00:00			`# speed up some time-consuming configure tests`
routine update to 7.46.0 2016-01-01 22:17:05 +00:00			`CONFIGURE_ENV+= \`
			`curl_cv_func_select_args="int,fd_set ,struct timeval ,int" \`
			`curl_cv_func_recv_args="int,void *,size_t,int,ssize_t" \`
Update to 7.62.0. Includes fixes for: CVE-2018-16839: SASL password overflow via integer overflow CVE-2018-16840: use-after-free in handle close CVE-2018-16842: warning message out-of-buffer read 2018-11-07 20:34:31 +00:00			`curl_cv_func_send_args="int,const void *,size_t,int,ssize_t"`
Speed up some time-consuming configure tests. ok naddy 2011-12-10 17:28:13 +00:00
keep up with upstream and update to 7.21.1; remove dead mirrors 2010-09-19 16:30:26 +00:00			`# Note:`
PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00			`# use ulimit -p 256 for test`
keep up with upstream and update to 7.21.1; remove dead mirrors 2010-09-19 16:30:26 +00:00
Update to 7.64.0. Includes fixes for CVE-2018-16890: NTLM type-2 out-of-bounds buffer read CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow CVE-2019-3823: SMTP end-of-response out-of-bounds read 2019-02-06 18:14:05 +00:00			`# runsshserver: sshserver.pl --user=$USER`
			`TEST_ENV= USER=$$USER`

add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00			`.include <bsd.port.mk>`