blob: e348036839228d6ef76fa14b915fd197aa7c8bd4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Contributor: Valery Kartel <valery.kartel@gmail.com>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=curl
pkgver=7.55.0
pkgrel=0
pkgdesc="An URL retrival utility and library"
url="http://curl.haxx.se"
arch="all"
license="MIT"
depends="ca-certificates"
makedepends="zlib-dev libressl-dev libssh2-dev groff perl"
source="http://curl.haxx.se/download/$pkgname-$pkgver.tar.bz2
curl-do-bounds-check-using-a-double-comparison.patch
"
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev libcurl"
# secfixes:
# 7.55.0-r0:
# - CVE-2017-1000099
# - CVE-2017-1000100
# - CVE-2017-1000101
# 7.54.0-r0:
# - CVE-2017-7468
# 7.53.1-r2:
# - CVE-2017-7407
# 7.53.0:
# - CVE-2017-2629
# 7.52.1:
# - CVE-2016-9594
# 7.51.0:
# - CVE-2016-8615
# - CVE-2016-8616
# - CVE-2016-8617
# - CVE-2016-8618
# - CVE-2016-8619
# - CVE-2016-8620
# - CVE-2016-8621
# - CVE-2016-8622
# - CVE-2016-8623
# - CVE-2016-8624
# - CVE-2016-8625
# 7.50.3:
# - CVE-2016-7167
# 7.50.2:
# - CVE-2016-7141
# 7.50.1:
# - CVE-2016-5419
# - CVE-2016-5420
# - CVE-2016-5421
# 7.36.0:
# - CVE-2014-0138
# - CVE-2014-0139
builddir="$srcdir/$pkgname-$pkgver"
build() {
cd "$builddir"
# see https://curl.haxx.se/mail/lib-2017-08/0050.html
rm docs/libcurl/opts/CURLOPT_STRIP_PATH_SLASH.3
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--enable-ipv6 \
--enable-unix-sockets \
--without-libidn \
--without-libidn2 \
--disable-ldap \
--with-pic \
|| return 1
make || return 1
}
check() {
cd "$builddir"
make check
}
package() {
make DESTDIR="$pkgdir" \
-C "$builddir" install || return 1
}
libcurl() {
pkgdesc="The multiprotocol file transfer library"
mkdir -p "$subpkgdir"/usr
mv "$pkgdir"/usr/lib "$subpkgdir"/usr
}
sha512sums="4975864621219e937585aaf5a9a54bba112b58bbf5a8acd92e1e972ea747a15a5564143548c5d8930b8c0d0e9d27d28225d0c81e52a1ba71e4c6f9e3859c978b curl-7.55.0.tar.bz2
d0f102fdbc2174169b2fea9248c3187d8c546d3a788447769dceec5fb7e063adbebbc967b88d208af1355cfda600f837abdae6d2e057a096eededc1857d2b8d3 curl-do-bounds-check-using-a-double-comparison.patch"
|
