Updates curl to 8.14.1

Updates curl to the latest stable version, 8.14.1, across multiple PHP versions and Alpine Linux distributions.

This update includes necessary changes to the APKBUILD files.

Also, a patch has been applied to address an incompatibility issue with Inline TLS Assembly on Alpine 3.22 with zend_jit_ir.c

Removes unneeded alpine3.22 curl builds from versions.json

Author: tobias-schaefer

8.0/alpine3.20/cli/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "

8.0/alpine3.20/fpm-zts/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "

8.0/alpine3.20/fpm/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "

8.0/alpine3.20/zts/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "

8.1/alpine3.20/cli/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "

8.1/alpine3.20/fpm-zts/CURL_APKBUILD

@@ -1,15 +1,15 @@
 # Contributor: Sergei Lukin <[email protected]>
 # Contributor: Valery Kartel <[email protected]>
 # Contributor: Łukasz Jendrysik <[email protected]>
-# Maintainer: Natanael Copa <[email protected]>
 
 # RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
 # and Rust is not yet available on all architectures.  Any commit which changes
 # this aport from arch=all WILL be reverted.
 
+maintainer="fossdd <[email protected]>"
 pkgname=curl
-pkgver=8.12.1
-pkgrel=0
+pkgver=8.14.1
+pkgrel=1
 pkgdesc="URL retrival utility and library"
 url="https://curl.se/"
 arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
 if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
 	options="$options !check" # remove python3 dependency
 fi
+provides="wcurl=$pkgver-r$pkgrel"
+replaces="wcurl"
 
 # secfixes:
+#   8.14.1-r0:
+#     - CVE-2025-5399
+#   8.14.0-r0:
+#     - CVE-2025-5025
+#     - CVE-2025-4947
 #   8.12.0-r0:
 #     - CVE-2025-0167
 #     - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
 		--with-libidn2 \
 		--with-nghttp2 \
 		--with-openssl \
-		--with-ca-bundle=/etc/ssl/cert.pem \
+		--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
+		--with-ca-path=/etc/ssl/certs \
 		--with-zsh-functions-dir \
 		--disable-ldap \
 		--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
 	amove usr/lib
 }
 
+dev() {
+	default_dev
+	# Used by trurl
+	install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
+}
+
 sha512sums="
-88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603  curl-8.12.1.tar.xz
+7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9  curl-8.14.1.tar.xz
 "