提交 · OpenHarmony-v3.1.3-Release · OpenHarmony / Third Party Curl

22 9月, 2022 1 次提交
- O
  !83 【OpenHarmony-3.1】curl组件存在CVE漏洞（CVE-2022-35252） · 22300502
  由 openharmony_ci 提交于 9月 22, 2022
```
Merge pull request !83 from 喻腾傲/OpenHarmony-3.1-Release
```
  22300502
21 9月, 2022 2 次提交
- D
  fix CVE-2022-35252 curl 7.78.0 · 7dfe22c9
  由 Daniel Stenberg 提交于 9月 07, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  7dfe22c9
- D
  fix CVE-2022-35252 curl 7.78.0 · 9cf98e8b
  由 Daniel Stenberg 提交于 9月 07, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  9cf98e8b
08 7月, 2022 1 次提交

由 openharmony_ci 提交于 7月 08, 2022

!71 【3.1Release分支】组件curl 7.78.0扫描发现CVE漏洞待修复（CVE-2022-32205、CVE-2022-32206、CVE-2022-32207、CVE-2022-32208）
Merge pull request !71 from 周海锋/OpenHarmony-3.1-Release

9167cbdc

07 7月, 2022 1 次提交
- Z
  add fopen.c to BUILD.gn · 0e4bec55
  由 zhouhaifeng 提交于 7月 07, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  0e4bec55
06 7月, 2022 9 次提交
- D
  test444: test many received Set-Cookie: · d0b2b55f
  由 Daniel Stenberg 提交于 6月 26, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  d0b2b55f
- D
  test442/443: test cookie caps · cab5418e
  由 Daniel Stenberg 提交于 6月 26, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  cab5418e
- D
  cookie: apply limits · 8ec84946
  由 Daniel Stenberg 提交于 6月 26, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  8ec84946
- D
  test387: verify rejection of compression chain · f65f481f
  由 Daniel Stenberg 提交于 5月 16, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  f65f481f
- D
  content_encoding: return error on too many · 5606332e
  由 Daniel Stenberg 提交于 5月 16, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  5606332e
- D
  hsts: use Curl_fopen() · 147d1418
  由 Daniel Stenberg 提交于 5月 25, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  147d1418
- D
  altsvc: use Curl_fopen() · 8d632a80
  由 Daniel Stenberg 提交于 5月 25, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  8d632a80
- D
  fopen: add Curl_fopen() for better overwriting of · 9181744c
  由 Daniel Stenberg 提交于 5月 25, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  9181744c
- D
  krb5: return error properly on decode errors · 35a3e009
  由 Daniel Stenberg 提交于 6月 09, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
  35a3e009
30 6月, 2022 2 次提交
- O
  !68 fix code modify when build · fc67a0a9
  由 openharmony_ci 提交于 6月 30, 2022
```
Merge pull request !68 from stesen/OpenHarmony-3.1-Release
```
  fc67a0a9
- S
  fix code modify when build · c34e5613
  由 stesen 提交于 6月 30, 2022
```
Signed-off-by: Nstesen <stesen.ma@huawei.com>
Change-Id: I9eb4baeed0917046ef4878c7716ae07584ac3253
```
  c34e5613
27 5月, 2022 4 次提交

O
!61 【OpenHarmony-3.1-Release 】curl存在CVE 漏洞CVE-2022-27781，CVE-2022-27782请修复 · c30eb798
由 openharmony_ci 提交于 5月 27, 2022
```
Merge pull request !61 from 周海锋/OpenHarmony-3.1-Release
```
c30eb798

url: check SSH config match on connection reuse · 51ddfdf6

由 Daniel Stenberg 提交于 5月 09, 2022

CVE-2022-27782

Reported-by: Harry Sintonen
Bug: https://curl.se/docs/CVE-2022-27782.html
Closes #8825
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

51ddfdf6

tls: check more TLS details for connection reuse · afe8bf00

由 Daniel Stenberg 提交于 5月 09, 2022

CVE-2022-27782

Reported-by: Harry Sintonen
Bug: https://curl.se/docs/CVE-2022-27782.html
Closes #8825
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

afe8bf00

nss: return error if seemingly stuck in a cert loop · 43b3224c

由 Daniel Stenberg 提交于 5月 09, 2022

CVE-2022-27781

Reported-by: Florian Kohnhäuser
Bug: https://curl.se/docs/CVE-2022-27781.html
Closes #8822
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

43b3224c

17 5月, 2022 1 次提交
- O
  !51 在3.1-Release上打补丁CVE-2022-22576、CVE-2022-27775、CVE-2022-27774、CVE-2022-27776 · 1c755ece
  由 openharmony_ci 提交于 5月 17, 2022
```
Merge pull request !51 from 周海锋/OpenHarmony-3.1-Release
```
  1c755ece
10 5月, 2022 9 次提交

openssl: don't leak the SRP credentials in redirects either · fb59682a

由 Daniel Stenberg 提交于 4月 25, 2022

Follow-up to 620ea21410030

Reported-by: Harry Sintonen
Closes #8751
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

fb59682a

tests: verify the fix for CVE-2022-27774 · c91e475f

由 Daniel Stenberg 提交于 4月 25, 2022

 - Test 973 redirects from HTTP to FTP, clear auth
 - Test 974 redirects from HTTP to HTTP different port, clear auth
 - Test 975 redirects from HTTP to FTP, permitted to keep auth
 - Test 976 redirects from HTTP to HTTP different port, permitted to keep
   auth
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

c91e475f

transfer: redirects to other protocols or ports clear auth · 513e5f70

由 Daniel Stenberg 提交于 4月 25, 2022

... unless explicitly permitted.

Bug: https://curl.se/docs/CVE-2022-27774.html
Reported-by: Harry Sintonen
Closes #8748
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

513e5f70

D
connect: store "conn_remote_port" in the info struct · ee1b6a8b
由 Daniel Stenberg 提交于 4月 25, 2022
```
To make it available after the connection ended.
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
ee1b6a8b
D
cookie.d: clarify when cookies are always sent · 872496b8
由 Daniel Stenberg 提交于 4月 25, 2022
```
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>
```
872496b8

test898: verify the fix for CVE-2022-27776 · 9408fbde

由 Daniel Stenberg 提交于 4月 25, 2022

Do not pass on Authorization headers on redirects to another port
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

9408fbde

http: avoid auth/cookie on redirects same host diff port · 919702fb

由 Daniel Stenberg 提交于 4月 25, 2022

CVE-2022-27776

Reported-by: Harry Sintonen
Bug: https://curl.se/docs/CVE-2022-27776.html
Closes #8749
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

919702fb

conncache: include the zone id in the "bundle" hashkey · 1d996130

由 Daniel Stenberg 提交于 4月 25, 2022

Make connections to two separate IPv6 zone ids create separate
connections.

Reported-by: Harry Sintonen
Bug: https://curl.se/docs/CVE-2022-27775.html
Closes #8747
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

1d996130

url: check sasl additional parameters for connection reuse. · 6c4da7bd

由 Patrick Monnerat 提交于 4月 25, 2022

Also move static function safecmp() as non-static Curl_safecmp() since
its purpose is needed at several places.

Bug: https://curl.se/docs/CVE-2022-22576.html

CVE-2022-22576

Closes #8746
Signed-off-by: Nzhouhaifeng <kutcher.zhou@huawei.com>

6c4da7bd

26 1月, 2022 2 次提交
- O
  !35 fix: mbedtls编译解耦 · 6e31d7de
  由 openharmony_ci 提交于 1月 26, 2022
```
Merge pull request !35 from Kiita/220126_decoupling
```
  6e31d7de
- fix: mbedtls编译解耦 · 24787b9f
  由 Yansira 提交于 1月 26, 2022
```
Signed-off-by: NKiita <zhanyan@huawei.com>
Change-Id: I5894a2c5acdcb3538544fe8f2067054597257d05
```
  24787b9f
24 1月, 2022 2 次提交
- O
  !34 specify CA certificate file path for ssl at compile time · d795a1f2
  由 openharmony_ci 提交于 1月 24, 2022
```
Merge pull request !34 from zhangbingce/dev-curl
```
  d795a1f2
- Z
  specify CA certificate file path for ssl at compile time · 2664d539
  由 zhangbingce 提交于 1月 22, 2022
```
Signed-off-by: Nzhangbingce <zhangbingce@huawei.com>
Change-Id: I3cb1f3189652792f7218c4c5be64e9c63dadf5c5
```
  2664d539
20 1月, 2022 2 次提交
- O
  !30 fix: curl已不在kal/posix的可见性列表中，newlib提供对curl的支持 · ecfb19ed
  由 openharmony_ci 提交于 1月 20, 2022
```
Merge pull request !30 from Kiita/220115_curl
```
  ecfb19ed
- O
  !33 feat: add bundle.json · 24952d66
  由 openharmony_ci 提交于 1月 20, 2022
```
Merge pull request !33 from 33/master
```
  24952d66
19 1月, 2022 3 次提交

O
!32 使能nghttp2 · 732aa933
由 openharmony_ci 提交于 1月 19, 2022
```
Merge pull request !32 from maosiping/master
```
732aa933
O
!32 使能nghttp2 · 1024daa5
由 openharmony_ci 提交于 1月 19, 2022
```
Merge pull request !32 from maosiping/master
```
1024daa5

fix: curl适配 · 4244c76b

由 Yansira 提交于 1月 15, 2022

1、curl已不在kal/posix的可见性列表中，newlib提供对curl的支持
2、优化curl_config.h编译未用到的配置
Signed-off-by: yansira <yansira@hotmail.com>
Change-Id: Ifcbbf8ecb10ae029add41640bddb143e08544969

4244c76b

18 1月, 2022 1 次提交
- S
  feat: add bundle.json · 80f571b9
  由 Sang_Sang33 提交于 1月 18, 2022
```
Signed-off-by: NSang_Sang33 <wangzhu15@huawei.com>
```
  80f571b9

OpenHarmony / Third Party Curl 9 个月 前同步成功

OpenHarmony / Third Party Curl
9 个月前同步成功