summaryrefslogtreecommitdiffstats
path: root/package/libcurl/libcurl.hash
diff options
context:
space:
mode:
authorGustavo Zacarias <gustavo@zacarias.com.ar>2014-11-05 11:31:32 -0300
committerPeter Korsgaard <peter@korsgaard.com>2014-11-06 09:09:20 +0100
commitc30e017a1a6c2d368c4742d55e9ed17f96d29c06 (patch)
tree1fe3e8419b0bac1773afbb56ebe25a3f95b50faa /package/libcurl/libcurl.hash
parent395c88051efb4b84f752be4eea1b34b13c80a1dc (diff)
downloadbuildroot-c30e017a1a6c2d368c4742d55e9ed17f96d29c06.tar.gz
buildroot-c30e017a1a6c2d368c4742d55e9ed17f96d29c06.zip
libcurl: security bump to version 7.39.0
Fixes: CVE-2014-3707 - libcurl's function curl_easy_duphandle() has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending. Removed patch that was upstream and now in the release. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libcurl/libcurl.hash')
-rw-r--r--package/libcurl/libcurl.hash2
1 files changed, 1 insertions, 1 deletions
diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash
index 7eded03958..4c3b8acd62 100644
--- a/package/libcurl/libcurl.hash
+++ b/package/libcurl/libcurl.hash
@@ -1,2 +1,2 @@
# Locally calculated after checking pgp signature
-sha256 035bd41e99aa1a4e64713f4cea5ccdf366ca8199e9be1b53d5a043d5165f9eba curl-7.38.0.tar.bz2
+sha256 b222566e7087cd9701b301dd6634b360ae118cc1cbc7697e534dc451102ea4e0 curl-7.39.0.tar.bz2
OpenPOWER on IntegriCloud