tarantool / tarantool / 7472422354

86%

master: 88%

push

github

third_party: update libcurl from 8.4.0 to 8.5.0

The patch updates curl module to the version 8.5.0 [1][2] that brings a
number of functional fixes and security fix for CVE-2023-46219 (HSTS
long file name clears contents), see description in [2], and updates
CMake module for building curl library.

Changes in CMake module:

- Option `CURL_DISABLE_HEADERS_API` was added and disabled by default [4].
- Option `CURL_DISABLE_BINDLOCAL` was added and disabled by default [5].
- Option `CURL_DISABLE_INSTALL` was added and disabled by default [6].

1. https://curl.se/changes.html#8_5_0
2. https://github.com/curl/curl/compare/curl-8_4_0...curl-8_5_0
3. https://curl.se/docs/CVE-2023-46219.html
4. https://github.com/curl/curl/commit/33493db2a
5. https://github.com/curl/curl/commit/20bb363f2
6. https://github.com/curl/curl/commit/aace27b09

NO_DOC=libcurl submodule bump
NO_TEST=libcurl submodule bump

(cherry picked from commit b8d733df8)

62466 of 113510 branches covered (0.0%)

93300 of 108683 relevant lines covered (85.85%)

2977073.5 hits per line