APKBUILD 3.68 KB
Newer Older
Sergei Lukin's avatar
Sergei Lukin committed
1
# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
2
# Contributor: Valery Kartel <valery.kartel@gmail.com>
3
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
Natanael Copa's avatar
Natanael Copa committed
4
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
Carlo Landmeter's avatar
Carlo Landmeter committed
5
pkgname=curl
6
pkgver=7.61.1
Leonardo Arena's avatar
Leonardo Arena committed
7
pkgrel=2
8 9
pkgdesc="URL retrival utility and library"
url="https://curl.haxx.se"
10
arch="all"
Carlo Landmeter's avatar
Carlo Landmeter committed
11
license="MIT"
12
depends="ca-certificates"
A. Klitzing's avatar
A. Klitzing committed
13
makedepends="zlib-dev libressl-dev libssh2-dev groff perl"
prspkt's avatar
prspkt committed
14
source="http://curl.haxx.se/download/$pkgname-$pkgver.tar.xz"
Timo Teräs's avatar
Timo Teräs committed
15
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev libcurl"
16 17
source="https://curl.haxx.se/download/$pkgname-$pkgver.tar.xz
	use-OPENSSL_config.patch
Leonardo Arena's avatar
Leonardo Arena committed
18 19 20
	CVE-2018-16839.patch
	CVE-2018-16840.patch
	CVE-2018-16842.patch
Leonardo Arena's avatar
Leonardo Arena committed
21 22 23
	CVE-2018-16890.patch
	CVE-2019-3822.patch
	CVE-2019-3823.patch
24
	"
25
builddir="$srcdir/$pkgname-$pkgver"
Carlo Landmeter's avatar
Carlo Landmeter committed
26

27
# secfixes:
Leonardo Arena's avatar
Leonardo Arena committed
28 29 30 31
#   7.61.1-r2:
#     - CVE-2018-16890
#     - CVE-2019-3822
#     - CVE-2019-3823
Leonardo Arena's avatar
Leonardo Arena committed
32 33 34 35
#   7.61.1-r1:
#     - CVE-2018-16839
#     - CVE-2018-16840
#     - CVE-2018-16842
36 37
#   7.61.1-r0:
#     - CVE-2018-14618
38 39
#   7.61.0-r0:
#     - CVE-2018-0500
prspkt's avatar
prspkt committed
40 41 42
#   7.60.0-r0:
#     - CVE-2018-1000300
#     - CVE-2018-1000301
prspkt's avatar
prspkt committed
43 44 45 46
#   7.59.0-r0:
#     - CVE-2018-1000120
#     - CVE-2018-1000121
#     - CVE-2018-1000122
47 48
#   7.58.0-r0:
#     - CVE-2018-1000005
TBK's avatar
TBK committed
49 50 51 52
#   7.57.0-r0:
#     - CVE-2017-8816
#     - CVE-2017-8817
#     - CVE-2017-8818
Natanael Copa's avatar
Natanael Copa committed
53 54
#   7.56.1-r0:
#     - CVE-2017-1000257
55 56 57 58
#   7.55.0-r0:
#     - CVE-2017-1000099
#     - CVE-2017-1000100
#     - CVE-2017-1000101
Natanael Copa's avatar
Natanael Copa committed
59 60
#   7.54.0-r0:
#     - CVE-2017-7468
Sergei Lukin's avatar
Sergei Lukin committed
61
#   7.53.1-r2:
Natanael Copa's avatar
Natanael Copa committed
62
#     - CVE-2017-7407
63 64
#   7.53.0:
#     - CVE-2017-2629
65 66
#   7.52.1:
#     - CVE-2016-9594
67 68 69 70 71 72 73 74 75 76 77 78
#   7.51.0:
#     - CVE-2016-8615
#     - CVE-2016-8616
#     - CVE-2016-8617
#     - CVE-2016-8618
#     - CVE-2016-8619
#     - CVE-2016-8620
#     - CVE-2016-8621
#     - CVE-2016-8622
#     - CVE-2016-8623
#     - CVE-2016-8624
#     - CVE-2016-8625
79 80
#   7.50.3:
#     - CVE-2016-7167
81 82
#   7.50.2:
#     - CVE-2016-7141
83 84 85 86 87 88 89 90
#   7.50.1:
#     - CVE-2016-5419
#     - CVE-2016-5420
#     - CVE-2016-5421
#   7.36.0:
#     - CVE-2014-0138
#     - CVE-2014-0139

Carlo Landmeter's avatar
Carlo Landmeter committed
91
build() {
92
	cd "$builddir"
93 94 95 96
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
Natanael Copa's avatar
Natanael Copa committed
97
		--enable-ipv6 \
V Krishn's avatar
V Krishn committed
98
		--enable-unix-sockets \
99
		--without-libidn \
100
		--without-libidn2 \
101
		--with-libssh2 \
102
		--disable-ldap \
TBK's avatar
TBK committed
103 104
		--with-pic
	make
Natanael Copa's avatar
Natanael Copa committed
105
}
106

107 108 109 110 111
check() {
	cd "$builddir"
	make check
}

Natanael Copa's avatar
Natanael Copa committed
112
package() {
113
	make DESTDIR="$pkgdir" \
TBK's avatar
TBK committed
114
		-C "$builddir" install
Carlo Landmeter's avatar
Carlo Landmeter committed
115 116
}

117 118 119 120 121 122
libcurl() {
	pkgdesc="The multiprotocol file transfer library"
	mkdir -p "$subpkgdir"/usr
	mv "$pkgdir"/usr/lib "$subpkgdir"/usr
}

123
sha512sums="e6f82a7292c70841162480c8880d25046bcfa64058f4ff76f7d398c85da569af1c244442c9c58a3478d59264365ff8e39eed2fb564cb137118588f7862e64e9a  curl-7.61.1.tar.xz
Leonardo Arena's avatar
Leonardo Arena committed
124 125 126
708527e73f9512c50e2250ca26786ba8994dc05fd2e362c1feb274e251219fb4bfc97e7e7722aa12424ccaf4c511d90d8820561c82a24f103b9ee2b743f4be28  use-OPENSSL_config.patch
4a28e4dcf36bf8e2fc5658d7fcee311d29452f4bed1479bad02772a8b7969c9dc653480b85715a5fe2bd2c2a8ae59e94fe72ffc6d0fe765131010d8f64bdfaee  CVE-2018-16839.patch
c1a684f17267b08f77625064ac62e4f06989c552d6d501565f8bebf31d3a96a613f0683376ec7cc16f6489554dcca4dcb1d428461159b82434c076df44ef5b38  CVE-2018-16840.patch
Leonardo Arena's avatar
Leonardo Arena committed
127 128 129 130
dcaca036eafaaae66eba99808d00ff6bed3c9e59c2c1239ca1ddcf54c9e1c53edabd543dc6925ded3cdf9efd39c0968353527ae5ed0b986cefba333fbc7fd1af  CVE-2018-16842.patch
573b896bd78e404002398bdf38d952ec6247af551ef7d6e34d52acbf004f8f4de60299e3a8f83be75e22dfb8731e466aea0253efec7116282afab32dbb1f66e8  CVE-2018-16890.patch
959a55237752b254bc5f58308607f3cf0475e207a7400ff6be7942c48131787f1dec4c05be5b76865ae0adf81ebae77774085ad0c19dd342fb0307cfcfe24b6c  CVE-2019-3822.patch
73f0d06f9bbd6f0688e67310120d1e806752626c103b0a52bc4b4a1a77bbe248885778f39386fbfc38cb534cd12d18f205c091769558e6a04b50010cb9ba6a69  CVE-2019-3823.patch"