tarantool / tarantool / 7337698087

88%

push

github

third_party: update libcurl from 8.4.0 to 8.5.0

The patch updates curl module to the version 8.5.0 [1][2] that brings a
number of functional fixes and security fix for CVE-2023-46219 (HSTS
long file name clears contents), see description in [2], and updates
CMake module for building curl library.

Changes in CMake module:

- Option `CURL_DISABLE_HEADERS_API` was added and disabled by default [4].
- Option `CURL_DISABLE_BINDLOCAL` was added and disabled by default [5].
- Option `CURL_DISABLE_INSTALL` was added and disabled by default [6].

1. https://curl.se/changes.html#8_5_0
2. https://github.com/curl/curl/compare/curl-8_4_0...curl-8_5_0
3. https://curl.se/docs/CVE-2023-46219.html
4. https://github.com/curl/curl/commit/33493db2a
5. https://github.com/curl/curl/commit/20bb363f2
6. https://github.com/curl/curl/commit/aace27b09

NO_DOC=libcurl submodule bump
NO_TEST=libcurl submodule bump

66434 of 118705 branches covered (0.0%)

98741 of 113649 relevant lines covered (86.88%)

2678663.66 hits per line