buildroot/package/libcurl/libcurl.hash, branch 2015.11

libcurl: bump to version 7.45.0

2015-10-08T15:06:51+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.44.0

2015-09-04T09:57:05+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.43.0

2015-06-18T20:41:32+00:00

- Bump to version 7.43.0 - Update hash file Signed-off-by: Vicente Olivert Riera Acked-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: security bump to version 7.42.1

2015-04-29T21:27:02+00:00

Fixes: CVE-2013-3153 - sensitive HTTP server headers also sent to proxies. And drop upstream patches. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcurl: security bump to version 7.42.0

2015-04-23T07:45:03+00:00

Fixes: CVE-2015-3144 - host name out of boundary memory access CVE-2015-3145 - cookie parser out of boundary memory access CVE-2015-3148 - Negotiate not treated as connection-oriented CVE-2015-3143 - Re-using authenticated connection when unauthenticated Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: bump to version 7.41.0

2015-02-25T16:25:54+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcurl: security bump to version 7.40.0

2015-01-08T18:19:15+00:00

Fixes: CVE-2014-8150 - When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those will be sent along to the proxy too, which allows the program to for example send a separate HTTP request injected embedded in the URL. CVE-2014-8151 - libcurl stores TLS Session IDs in its associated Session ID cache when it connects to TLS servers. In subsequent connects it re-uses the entry in the cache to resume the TLS connection faster than when doing a full TLS handshake. The actual implementation for the Session ID caching varies depending on the underlying TLS backend. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: security bump to version 7.39.0

2014-11-06T08:09:20+00:00

Fixes: CVE-2014-3707 - libcurl's function curl_easy_duphandle() has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending. Removed patch that was upstream and now in the release. Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: add hash file

2014-10-19T15:35:17+00:00

Signed-off-by: Gustavo Zacarias Acked-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni