naddy 339fa501b8 net/curl: security update to 7.83.0
Includes fixes for
CVE-2022-22576: OAUTH2 bearer bypass in connection re-use
CVE-2022-27774: Credential leak on redirect
CVE-2022-27775: Bad local IPv6 connection reuse
CVE-2022-27776: Auth/cookie leak on redirect
2022-04-27 19:19:14 +00:00

52 lines
1.3 KiB
Makefile

COMMENT= transfer files with FTP, HTTP, HTTPS, etc.
DISTNAME= curl-7.83.0
SHARED_LIBS= curl 26.14 # 12.0
CATEGORIES= net
HOMEPAGE= https://curl.se/
MAINTAINER= Christian Weisgerber <naddy@openbsd.org>
# MIT
PERMIT_PACKAGE= Yes
MASTER_SITES= https://curl.se/download/
EXTRACT_SUFX= .tar.xz
LIB_DEPENDS= www/nghttp2
WANTLIB= c crypto pthread nghttp2 ssl z
AUTOCONF_VERSION=2.71
CONFIGURE_STYLE=autoconf
# Beware of circular dependency curl -> brotli -> cmake -> curl
CONFIGURE_ARGS= --with-openssl \
--with-ca-bundle=/etc/ssl/cert.pem \
--without-brotli \
--without-hyper \
--without-libgsasl \
--without-libidn2 \
--without-libpsl \
--without-libssh \
--without-libssh2 \
--without-zstd
CONFIGURE_ENV= ac_cv_path_NROFF="/usr/bin/mandoc -Tascii"
# speed up some time-consuming configure tests
CONFIGURE_ENV+= \
curl_cv_func_select_args="int,fd_set *,struct timeval *,int" \
curl_cv_func_recv_args="int,void *,size_t,int,ssize_t" \
curl_cv_func_send_args="int,const void *,size_t,int,ssize_t"
DEBUG_PACKAGES= ${BUILD_PACKAGES}
# Note:
# use ulimit -p 256 for test
# Skip python dependency; it is only required for three rudimentary
# DICT/SMB/TELNET tests.
# runsshserver: sshserver.pl --user=$USER
TEST_ENV= USER=$$USER
.include <bsd.port.mk>