Package curl

7.65.0-alt1 built May 24, 2019 Anton Farygin in task #229802
May 22, 2019 Anton Farygin 
- 7.65.0
- fixes:
  * CVE-2019-5435: Integer overflows in curl_url_set
  * CVE-2019-5436: tftp: use the current blksize for recvfrom
March 28, 2019 Anton Farygin 7.64.1-alt1
- 7.64.1
March 14, 2019 Anton Farygin 7.64.0-alt2
- increased level of verbosity in make check stage
7.64.0-alt1 built Feb. 8, 2019 Anton Farygin in task #220788
Feb. 6, 2019 Anton Farygin 
- 7.64.0
- fixes:
  * CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  * CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  * CVE-2019-3823: SMTP end-of-response out-of-bounds read
Dec. 12, 2018 Anton Farygin 7.63.0-alt1
- 7.63.0
7.62.0-alt3 built Nov. 14, 2018 Anton Farygin in task #216462
Nov. 14, 2018 Anton Farygin 
- enabled idn support (closes: #34103)
- enabled ldap support
- enabled brotli support
Nov. 1, 2018 Michael Shigorin 7.62.0-alt2
- added nghttp2 knob (on by default)
Oct. 31, 2018 Anton Farygin 7.62.0-alt1
- 7.62.0 
- fixes:
  * CVE-2018-16839 - buffer overrun in the SASL authentication code. 
  * CVE-2018-16840 - use-after-free in handle close
  * CVE-2018-16842 - warning message out-of-buffer read
Oct. 11, 2018 Anton Farygin 7.61.1-alt2
- enabled HTTP/2 support
Sept. 9, 2018 Anton Farygin 7.61.1-alt1
- 7.61.1 (fixes: CVE-2018-14618)
Aug. 16, 2018 Gleb Fotengauer-Malinovskiy 7.61.0-alt2
- Rebuilt with openssl 1.1.
- Added BR: libkrb5-devel.
July 17, 2018 Anton Farygin 7.61.0-alt1
- 7.61.0
- fixes:
  * CVE-2018-0500 SMTP send heap buffer overflow
May 16, 2018 Anton Farygin 7.60.0-alt1
- 7.60.0 
- fixes:
  * CVE-2018-1000300 FTP shutdown response buffer overflow
  * CVE-2018-1000301 RTSP bad headers buffer over-read
March 31, 2018 Anton Farygin 7.59.0-alt1
- new version 
- fixes: 
  * CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write
  * CVE-2018-1000121 LDAP NULL pointer dereference
  * CVE-2018-1000122  RTSP RTP buffer over-read
Jan. 24, 2018 Anton Farygin 7.58.0-alt1
- new version
- fixes:
  * CVE-2018-1000005 HTTP/2 trailer out-of-bounds read
  * CVE-2018-1000007 HTTP authentication leak in redirects
Dec. 1, 2017 Anton Farygin 7.57.0-alt1
- new version
- fixes:
  * CVE-2017-8818 SSL out of buffer access
  * CVE-2017-8817 FTP wildcard out of bounds read
  * CVE-2017-8816 NTLM buffer overflow via integer overflow
Oct. 23, 2017 Anton Farygin 7.56.1-alt1
- new version
- fixes:
  * CVE-2017-1000257 libcurl contains a buffer overrun flaw in the IMAP handler
Oct. 4, 2017 Anton Farygin 7.56.0-alt1
- new version
- fixes:
  * CVE-2017-1000254 libcurl may read outside of a heap allocated buffer when doing FTP.
Aug. 14, 2017 Anton Farygin 7.55.1-alt1
- new version
Aug. 9, 2017 Anton Farygin 7.55.0-alt1
- new version with following security fixes:
   * CVE-2017-1000101 glob: do not parse after a strtoul() overflow range
   * CVE-2017-1000100 tftp: reject file name lengths that don't fit
   * CVE-2017-1000099 file: output the correct buffer to the user
June 14, 2017 Anton Farygin 7.54.1-alt1
- new version with security fixes:
  CVE-2017-9502: URL file scheme drive letter buffer overflow
April 19, 2017 Anton Farygin 7.54.0-alt1
- new version with security fixes:
  CVE-2016-5419: TLS session resumption client cert bypass (again)
Feb. 27, 2017 Anton Farygin 7.53.1-alt1
- new version
Feb. 22, 2017 Anton Farygin 7.53.0-alt1
- new version with security fixes:
  CVE-2017-2629: SSL_VERIFYSTATUS ignored
Dec. 23, 2016 Anton Farygin 7.52.1-alt1
- new version with security fixes:
  CVE-2016-9594: uninitialized random
Dec. 21, 2016 Anton Farygin 7.52.0-alt1
- new version with security fixes:
  CVE-2016-9586: printf floating point buffer overflow
Dec. 7, 2016 Anton Farygin 7.51.0-alt2
- enabled gssapi (closes: #32862)
Nov. 2, 2016 Anton Farygin 7.51.0-alt1
- new version with security fixes:
  CVE-2016-8615: cookie injection for other servers 
  CVE-2016-8616: case insensitive password comparison 
  CVE-2016-8617: OOB write via unchecked multiplication 
  CVE-2016-8618: double-free in curl_maprintf 
  CVE-2016-8619: double-free in krb5 code 
  CVE-2016-8620: glob parser write/read out of bounds 
  CVE-2016-8621: curl_getdate read out of bounds 
  CVE-2016-8622: URL unescape heap overflow via integer truncation 
  CVE-2016-8623: Use-after-free via shared cookies 
  CVE-2016-8624: invalid URL parsing with '#'
  CVE-2016-8625: IDNA 2003 makes curl use wrong host
Oct. 27, 2016 Vladimir D. Seleznev 7.50.3-alt2
- libcurl-devel: packaged libcurl.m4
Sept. 14, 2016 Anton Farygin 7.50.3-alt1
- new version with security fixes (CVE-2016-7167)
Sept. 9, 2016 Anton Farygin 7.50.2-alt1
- new version
7.50.1-alt1 built Sept. 7, 2016 Andrey Cherepanov in task #169235
Aug. 26, 2016 Anton Farygin 
- new version
7.50.0-alt1 built Aug. 20, 2016 Andrey Cherepanov in task #168700
July 21, 2016 Anton Farygin 
- new version
May 30, 2016 Anton Farygin 7.49.1-alt1
- new version
May 23, 2016 Anton Farygin 7.49.0-alt1
- new version
March 24, 2016 Anton Farygin 7.48.0-alt1
- new version
March 12, 2016 Anton Farygin 7.47.1-alt1
- new version
Dec. 13, 2015 Anton Farygin 7.46.0-alt2
- enabled http2 support (closes: #31617)
Dec. 7, 2015 Anton Farygin 7.46.0-alt1
- new version
Oct. 18, 2015 Anton Farygin 7.45.0-alt1
- new version
June 19, 2015 Anton Farygin 7.43.0-alt1
- new version, with fixes for CVE-2015-3236, CVE-2015-3237
April 29, 2015 Anton Farygin 7.42.1-alt1
- new version, with fixes for CVE-2015-3153
April 22, 2015 Anton Farygin 7.42.0-alt1
- new version, with fixes for CVE-2015-3148, CVE-2015-3143, CVE-2015-3145 
  and CVE-2015-3144
Feb. 25, 2015 Anton Farygin 7.41.0-alt1
- new version
Jan. 14, 2015 Anton Farygin 7.40.0-alt1
- new version
Nov. 5, 2014 Anton Farygin 7.39.0-alt1
- new version
Oct. 30, 2014 Anton Farygin 7.38.0-alt2
- threaded-resolver: revert Curl_expire_latest() switch (closes: #30427)
Sept. 10, 2014 Anton Farygin 7.38.0-alt1
- new version
July 24, 2014 Anton Farygin 7.37.1-alt1
- new version
June 6, 2014 Anton Farygin 7.37.0-alt1
- new version
March 26, 2014 Anton Farygin 7.36.0-alt1
- new version
- added watch file
Feb. 14, 2014 Anton Farygin 7.35.0-alt2
- test172 fixed by upstream
Jan. 29, 2014 Anton Farygin 7.35.0-alt1
- new version
Dec. 17, 2013 Anton Farygin 7.34.0-alt1
- new version
Oct. 23, 2013 Anton Farygin 7.33.0-alt1
- new version
Aug. 16, 2013 Anton Farygin 7.32.0-alt1
- new version
June 24, 2013 Anton Farygin 7.31.0-alt1
- new version
April 16, 2013 Anton Farygin 7.30.0-alt1
- new version
Feb. 11, 2013 Anton Farygin 7.29.0-alt2
- Fix NULL pointer reference when closing an unused multi handle (closes: #28534)
Feb. 6, 2013 Anton Farygin 7.29.0-alt1
- new version
Sept. 18, 2012 Anton Farygin 7.27.0-alt1
- new version
May 29, 2012 Anton Farygin 7.26.0-alt1
- new version
Jan. 24, 2012 Anton Farygin 7.24.0-alt1
- new version (fixes two separate security vulnerabilities)
Nov. 24, 2011 Anton Farygin 7.23.1-alt1
- new version
Sept. 16, 2011 Anton Farygin 7.22.0-alt1
- new version
June 27, 2011 Gleb Fotengauer-Malinovskiy 7.21.7-alt1
- new version (CVE-2011-2192)
April 23, 2011 Anton Farygin 7.21.6-alt1
- new version
April 18, 2011 Gleb Fotengauer-Malinovskiy 7.21.5-alt2
- fix curl-config script:
 + version: replace VERSION with CURLVERSION
 + checkfor: add Requires: bc
April 18, 2011 Anton Farygin 7.21.5-alt1
- new version
March 15, 2011 Alexey Tourbin 7.21.4-alt2
- libcurl-devel: removed dependencies on libidn-devel libssl-devel zlib-devel
- applied debug.patch from Fedora to enable -g in CFLAGS
Feb. 26, 2011 Anton Farygin 7.21.4-alt1
- new version
- enabled test check
Feb. 8, 2011 Anton Farygin 7.21.3-alt1
- new version
- test suite temporary disabled (it does not work in hasher)
Oct. 13, 2010 Anton Farygin 7.21.2-alt1
- new version
Oct. 1, 2010 Dmitry V. Levin 7.21.1-alt3
- Removed unused requirement on libcares.
- Cleaned up package descriptions.
- Enabled test suite.
- Built with libssl.so.10.
Aug. 20, 2010 Anton Farygin 7.21.1-alt2
- build without libcares (fixed #23891,#23486)
Aug. 12, 2010 Anton Farygin 7.21.1-alt1
- new version
- enabled build with libssh2
June 29, 2010 Anton Farygin 7.21.0-alt1
- new version
April 15, 2010 Anton Farygin 7.20.1-alt1
- new version
Feb. 11, 2010 Anton Farygin 7.20.0-alt1
- new version
Nov. 8, 2009 Anton Farygin 7.19.7-alt1
- new version
Aug. 13, 2009 Anton Farygin 7.19.6-alt1
- new version (CVE-2009-2417)
March 7, 2009 Anton Farygin 7.19.4-alt2
- build curl with really external libcares (fixed #19097)
March 3, 2009 Anton Farygin 7.19.4-alt1
- new version (CVE-2009-0037)
Feb. 9, 2009 Anton Farygin 7.19.3-alt3
- build from cvs
Feb. 9, 2009 Anton Farygin 7.19.3-alt2
- curl-config --libs fixed (#18779)
Jan. 28, 2009 Anton Farygin 7.19.3-alt1
- new version
Nov. 14, 2008 Anton Farygin 7.19.2-alt1
- new version
Nov. 14, 2008 Anton Farygin 7.19.1-alt2
- post-ldconfig removed
Nov. 10, 2008 Anton Farygin 7.19.1-alt1
- new version
Sept. 15, 2008 Anton Farygin 7.19.0-alt2
- enabled c-ares support (#17101)
Sept. 12, 2008 Anton Farygin 7.19.0-alt1
- new version
June 5, 2008 Anton Farygin 7.18.2-alt1
- new version
April 7, 2008 Anton Farygin 7.18.1-alt1
- new version
Jan. 31, 2008 Anton Farygin 7.18.0-alt1
- new version
Nov. 15, 2007 Anton Farygin 7.17.1-alt2
- disabled ldap support
Nov. 6, 2007 Anton Farygin 7.17.1-alt1
- new version
Sept. 14, 2007 Anton Farygin 7.17.0-alt1
- new version
- removed patch1 (included to mainstream)
- removed unsused patch0
Sept. 11, 2007 Anton Farygin 7.16.4-alt2
- added patch to ftp from sbolshakov@. Fixed anonymous login on some non-standart servers
July 11, 2007 Anton Farygin 7.16.4-alt1
- new version with security fixes (CVE-2007-3564)
- disabled kerberos support (by requiest from krb5 mantainer)
July 3, 2007 Anton Farygin 7.16.3-alt1
- new version
April 12, 2007 Anton Farygin 7.16.2-alt1
- new version
Feb. 12, 2007 Anton Farygin 7.16.1-alt3
- fixed curl-config --libs and libcurl.pc (unneeded libs removed)
Feb. 9, 2007 Anton Farygin 7.16.1-alt2
- use ca-certificates
- build with gssapi support
- updated build requires
Jan. 31, 2007 Anton Farygin 7.16.1-alt1
- new version
Jan. 9, 2007 Anton Farygin 7.16.0-alt1
- new version (soname changed)
Sept. 13, 2006 Anton Farygin 7.15.5-alt1
- new version
March 24, 2006 Anton Farygin 7.15.3-alt1
- new version
Oct. 14, 2005 Anton Farygin 7.15.0-alt1
- new version
Sept. 2, 2005 Anton Farygin 7.14.1-alt1
- new version
May 17, 2005 Anton Farygin 7.14.0-alt1
- new version
May 6, 2005 Anton Farygin 7.13.2-alt1
- new version
March 4, 2005 Anton Farygin 7.13.1-alt1
- 7.13.1
Feb. 7, 2005 Anton Farygin 7.13.0-alt2
- libcurl-devel: added requires to libidn-devel libssl-devel zlib-devel
Feb. 1, 2005 Anton Farygin 7.13.0-alt1
- new version
Jan. 18, 2005 Anton Farygin 7.12.3-alt1
- new version
Oct. 29, 2004 Anton Farygin 7.12.2-alt1
- new version
Oct. 15, 2004 Anton Farygin 7.12.1-alt1
- new version
April 26, 2004 Anton Farygin 7.11.2-alt1
- new version
April 20, 2004 Anton Farygin 7.11.1-alt1
- new version
March 18, 2004 Anton Farygin 7.11.0-alt1
- new version
Dec. 14, 2003 Anton Farygin 7.10.8-alt1
- new version
April 30, 2003 Anton Farygin 7.10.4-alt1
- 7.10.4
March 31, 2003 Anton Farygin 7.10.3-alt1
- 7.10.3
Nov. 22, 2002 Anton Farygin 7.10.2-alt1
- new version
Oct. 4, 2002 Anton Farygin 7.10-alt1
- 7.10
June 14, 2002 Anton Farygin 7.9.8-alt1
- 7.9.8
June 1, 2002 Anton Farygin 7.9.7-alt1
- 7.9.7
April 27, 2002 Anton Farygin 7.9.6-alt1
- 7.9.6
March 27, 2002 Anton Farygin 7.9.5-alt1
- 7.9.5
Feb. 9, 2002 Anton Farygin 7.9.4-alt1
- 7.9.4
Jan. 3, 2002 Anton Farygin 7.9.2-alt1
- 7.9.2
- russian summary and description
Oct. 9, 2001 Anton Farygin 7.9-alt1
- 7.9
Aug. 24, 2001 Anton Farygin 7.8.1-alt1
- 7.8.1
May 22, 2001 Alexander Bokovoy 7.7.3-alt2
- Fixed:
    + curl-config moved to libcurl-devel
    + curl-config(1) moved to libcurl-devel
May 8, 2001 Anton Farygin 7.7.3-alt1
- 7.7.3
April 25, 2001 Anton Farygin 7.7.2-alt1
- 7.7.2
April 5, 2001 Anton Farygin 7.7.1-alt1
- 7.7.1
Jan. 28, 2001 Dmitry V. Levin 7.6-ipl1mdk
- 7.6
Jan. 21, 2001 Dmitry V. Levin 7.5.2-ipl2mdk
- RE adaptions.
Jan. 9, 2001 DindinX 7.5.2-2mdk
- change lisence, according to the author's will (reported by F. Crozat)
- added some sample codes to the -devel package
Jan. 9, 2001 DindinX 7.5.2-1mdk
- 7.5.2
- small spec updates
Dec. 18, 2000 DindinX 7.5.1-2mdk
- corrected URL
Dec. 13, 2000 DindinX 7.5.1-1mdk
- 7.5.1
Dec. 7, 2000 Geoffrey lee 7.5-2mdk
- manually include fcntl.h, strangely, it has been left out (sucky!!!).
Dec. 4, 2000 Geoffrey lee 7.5-1mdk
- new and shiny source.
- requires: curl = %version
Nov. 15, 2000 Geoffrey Lee 7.4.2-5mdk
- really 7.4.2.
- well we compile with ssl now, so obviously description is wrong (daoudascks)
Nov. 13, 2000 Daouda Lo 7.4.2-4mdk
- compiled with ssl (from TitiSux)
Nov. 13, 2000 Daouda Lo 7.4.2-3mdk
- relase pre4.
Nov. 10, 2000 Lenny Cartier 7.4.2-2mdk
- fiw requires
Nov. 7, 2000 Daouda Lo 7.4.2-1mdk
- new release
Nov. 3, 2000 DindinX 7.4.1-1mdk
- 7.4.1
Aug. 28, 2000 Lenny Cartier 7.1-1mdk
- used srpm from Anton Graham <darkimage@bigfoot.com> :
	- new version
	- new -lib and -devel packages
Aug. 28, 2000 Lenny Cartier 6.5.2-3mdk
- change description
- clean spec
July 11, 2000 Anton Graham 6.5.2-2mdk
- Macroification
May 3, 2000 Anton Graham 6.5.2-1mdk
- First Mandrake build
Back to Top