Re: git: 77a0a54b7f3d - main - ftp/curl: Update to 8.17.0

10.11.2025 18:45, Jochen Neumeister пишет:
> Am 09.11.25 um 17:34 schrieb Po-Chuan Hsieh:
>> The branch main has been updated by sunpoet:
>>
>> URL: 
>> https://cgit.FreeBSD.org/ports/commit/?id=77a0a54b7f3df8548487920090550ac880e8e26c
>>
>> commit 77a0a54b7f3df8548487920090550ac880e8e26c
>> Author:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>> AuthorDate: 2025-11-09 16:09:31 +0000
>> Commit:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>> CommitDate: 2025-11-09 16:30:48 +0000
>>
>>      ftp/curl: Update to 8.17.0
>>           - Remove GSSAPI_HEIMDAL option
>>      - Change OPTIONS_DEFAULT from conditional GSSAPI_BASE to 
>> GSSAPI_NONE
>>           Changes:        https://curl.se/changes.html
>>      Security:       CVE-2025-10966
>> ---
>>   ftp/curl/Makefile                 | 12 +++---------
>>   ftp/curl/distinfo                 |  6 +++---
>>   ftp/curl/files/extra-patch-gssapi | 11 -----------
>>   ftp/curl/pkg-plist                |  5 +++++
>>   4 files changed, 11 insertions(+), 23 deletions(-)
>>
>> diff --git a/ftp/curl/Makefile b/ftp/curl/Makefile
>> index 933e647ee542..56d41aec3918 100644
>> --- a/ftp/curl/Makefile
>> +++ b/ftp/curl/Makefile
>> @@ -1,5 +1,5 @@
>>   PORTNAME=    curl
>> -PORTVERSION=    8.16.0
>> +PORTVERSION=    8.17.0
>>   CATEGORIES=    ftp net www
>>   MASTER_SITES=    https://curl.se/download/ \
>> https://github.com/curl/curl/releases/download/curl-${PORTVERSION:S|.|_|g}/
>> @@ -50,9 +50,9 @@ OPTIONS_SINGLE=    GSSAPI RESOLV
>>   OPTIONS_GROUP_COMPRESSION=    BROTLI ZSTD
>>   OPTIONS_GROUP_PROTOCOL=    DICT FTP GOPHER HTTP HTTP2 IMAP IPFS 
>> LDAP LDAPS LIBSSH LIBSSH2 MQTT POP3 RTSP SMB SMTP TELNET TFTP WEBSOCKET
>>   OPTIONS_RADIO_SSL=    GNUTLS OPENSSL WOLFSSL
>> -OPTIONS_SINGLE_GSSAPI=    GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT 
>> GSSAPI_NONE
>> +OPTIONS_SINGLE_GSSAPI=    GSSAPI_BASE GSSAPI_MIT GSSAPI_NONE
>>   OPTIONS_SINGLE_RESOLV=    CARES THREADED_RESOLVER
>> -OPTIONS_DEFAULT=ALTSVC BROTLI COOKIES GSSAPI_${${SSL_DEFAULT} == 
>> base :?BASE :NONE} DICT FTP GOPHER HTTP HTTP2 IDN IMAP IPFS LIBSSH2 
>> MQTT NTLM OPENSSL POP3 PROXY PSL RTSP SMB SMTP STATIC TELNET TFTP 
>> THREADED_RESOLVER TLS_SRP WEBSOCKET ZSTD
>> +OPTIONS_DEFAULT=ALTSVC BROTLI COOKIES GSSAPI_NONE DICT FTP GOPHER 
>> HTTP HTTP2 IDN IMAP IPFS LIBSSH2 MQTT NTLM OPENSSL POP3 PROXY PSL 
>> RTSP SMB SMTP STATIC TELNET TFTP THREADED_RESOLVER TLS_SRP WEBSOCKET 
>> ZSTD
>>   OPTIONS_SUB=    yes
>>   ALTSVC_DESC=    HTTP Alternative Services support
>>   COOKIES_DESC=    Cookies support
>> @@ -98,15 +98,9 @@ GNUTLS_LIB_DEPENDS= libgnutls.so:security/gnutls \
>>   GOPHER_CONFIGURE_ENABLE=gopher
>>   GSSAPI_BASE_CONFIGURE_ON=    --with-gssapi=${GSSAPIBASEDIR} 
>> ${GSSAPI_CONFIGURE_ARGS}
>>   GSSAPI_BASE_CPPFLAGS=    ${GSSAPICPPFLAGS}
>> -GSSAPI_BASE_EXTRA_PATCHES=    ${PATCHDIR}/extra-patch-gssapi
>>   GSSAPI_BASE_LDFLAGS=    ${GSSAPILDFLAGS}
>>   GSSAPI_BASE_LIBS=    ${GSSAPILIBS}
>>   GSSAPI_BASE_USES=    gssapi
>> -GSSAPI_HEIMDAL_CONFIGURE_ON=    --with-gssapi=${GSSAPIBASEDIR} 
>> ${GSSAPI_CONFIGURE_ARGS}
>> -GSSAPI_HEIMDAL_CPPFLAGS=${GSSAPICPPFLAGS}
>> -GSSAPI_HEIMDAL_LDFLAGS=    ${GSSAPILDFLAGS}
>> -GSSAPI_HEIMDAL_LIBS=    ${GSSAPILIBS}
>> -GSSAPI_HEIMDAL_USES=    gssapi:heimdal
>>   GSSAPI_MIT_CONFIGURE_ON=--with-gssapi=${GSSAPIBASEDIR} 
>> ${GSSAPI_CONFIGURE_ARGS}
>>   GSSAPI_MIT_CPPFLAGS=    ${GSSAPICPPFLAGS}
>>   GSSAPI_MIT_LDFLAGS=    ${GSSAPILDFLAGS}
>>
>
> checking for gss.h... no
> checking for gssapi/gssapi.h... yes
> checking for gssapi/gssapi_generic.h... no
> checking for gssapi/gssapi_krb5.h... yes
> configure: error: MIT or GNU GSS library required, but not found
> ===>  Script "configure" failed unexpectedly.
> Please report the problem to sunpoet@FreeBSD.org [maintainer] and 
> attach the
> "/wrkdirs/usr/ports/ftp/curl/work/curl-8.17.0/config.log" including 
> the output
> of the failure of your make command. Also, it might be a good idea to 
> provide
> an overview of all packages installed on your system (e.g. a
> /usr/local/sbin/pkg-static info -g -Ea).
> *** Error code 1
>
> Stop.
> make: stopped in /usr/ports/ftp/curl
> =>> Cleaning up wrkdir
> ===>  Cleaning for curl-8.17.0
> build of ftp/curl | curl-8.17.0 ended at 2025-11-10T16:42:34+01:00
> build time: 00:00:07
> !!! build failure encountered !!!
>
>
> Was the port tested before you released it? 

Already reported in this list and even created PR:
https://bugs.freebsd.org/290924

-- 
Best regards,
Vladimir Druzenko