![](https://seccdn.libravatar.org/avatar/e2145bc5cf53dda95c308a3c75e8fef3.jpg?s=120&d=mm&r=g)
Hello community,
here is the log from the commit of package curl for openSUSE:Factory
checked in at Tue Mar 3 22:12:48 CET 2009.
--------
--- curl/curl.changes 2008-12-10 13:52:19.000000000 +0100
+++ curl/curl.changes 2009-03-03 11:04:57.000000000 +0100
@@ -1,0 +2,39 @@
+Mon Mar 2 15:44:14 CET 2009 - mmarek@suse.cz
+
+- updated to 7.19.4
+ * don't follow redirects to file:// and scp:// by default; add
+ new curl_easy_setopt options CURLOPT_PROTOCOLS and
+ CURLOPT_REDIR_PROTOCOLS to specify which protocols are allowed
+ and which protocols are allowed to redirect to (bnc#475103,
+ CVE-2009-0037)
+ * Added CURLOPT_NOPROXY and the corresponding --noproxy
+ * the OpenSSL-specific code disables TICKET (rfc5077) which is
+ enabled by default in openssl 0.9.8j
+ * Added CURLOPT_TFTP_BLKSIZE
+ * Added CURLOPT_SOCKS5_GSSAPI_SERVICE and
+ CURLOPT_SOCKS5_GSSAPI_NEC - with the corresponding curl options
+ --socks5-gssapi-service and --socks5-gssapi-nec
+ * Improved IPv6 support when built with with c-ares >= 1.6.1
+ * Added CURLPROXY_HTTP_1_0 and --proxy1.0
+ * Added docs/libcurl/symbols-in-versions
+ * Added CURLINFO_CONDITION_UNMET
+ * Added support for Digest and NTLM authentication using GnuTLS
+ * CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 to retry
+ the CWD even when MKD fails
+ * GnuTLS initing moved to curl_global_init()
+ * CURLAUTH_DIGEST_IE bit added for CURLOPT_HTTPAUTH and
+ CURLOPT_PROXYAUTH
+ * pkg-config can now show supported_protocols and
+ supported_features
+ * Added CURLOPT_CERTINFO and CURLINFO_CERTINFO
+ * Added CURLOPT_POSTREDIR
+ * Better detect HTTP 1.0 servers and don't do HTTP 1.1 requests
+ on them
+ * configure --disable-proxy disables proxy support
+ * Added CURLOPT_USERNAME and CURLOPT_PASSWORD
+ * --interface now works with IPv6 connections on glibc systems
+ * Added CURLOPT_PROXYUSERNAME and CURLOPT_PROXYPASSWORD
+
+
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
Old:
----
curl-7.19.0.tar.bz2
New:
----
curl-7.19.4.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ curl.spec ++++++
--- /var/tmp/diff_new_pack.Dx7023/_old 2009-03-03 21:59:02.000000000 +0100
+++ /var/tmp/diff_new_pack.Dx7023/_new 2009-03-03 21:59:02.000000000 +0100
@@ -1,7 +1,7 @@
#
-# spec file for package curl (Version 7.19.0)
+# spec file for package curl (Version 7.19.4)
#
-# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -32,8 +32,9 @@
# used by the testsuite
BuildRequires: stunnel
%endif
-Version: 7.19.0
-Release: 11
+#define cvs_suffix -20090302
+Version: 7.19.4
+Release: 1
AutoReqProv: on
# bug437293
%ifarch ppc64
@@ -44,7 +45,7 @@
Group: Productivity/Networking/Web/Utilities
Summary: A Tool for Transferring Data from URLs
Url: http://curl.haxx.se/
-Source: curl-%{version}.tar.bz2
+Source: curl-%version%{?cvs_suffix}.tar.bz2
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@@ -99,7 +100,7 @@
Daniel Stenberg