buildroot/package/libcurl/libcurl.hash, branch 2016.02

libcurl: bump to version 7.47.1

2016-02-08T20:26:09+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/libcurl: security bump version to 7.47.0

2016-01-28T21:29:08+00:00

Fixes CVE-2016-0754: remote file name path traversal in curl tool for Windows CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.46.0

2015-12-02T20:27:30+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.45.0

2015-10-08T15:06:51+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.44.0

2015-09-04T09:57:05+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.43.0

2015-06-18T20:41:32+00:00

- Bump to version 7.43.0 - Update hash file Signed-off-by: Vicente Olivert Riera Acked-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: security bump to version 7.42.1

2015-04-29T21:27:02+00:00

Fixes: CVE-2013-3153 - sensitive HTTP server headers also sent to proxies. And drop upstream patches. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcurl: security bump to version 7.42.0

2015-04-23T07:45:03+00:00

Fixes: CVE-2015-3144 - host name out of boundary memory access CVE-2015-3145 - cookie parser out of boundary memory access CVE-2015-3148 - Negotiate not treated as connection-oriented CVE-2015-3143 - Re-using authenticated connection when unauthenticated Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: bump to version 7.41.0

2015-02-25T16:25:54+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcurl: security bump to version 7.40.0

2015-01-08T18:19:15+00:00

Fixes: CVE-2014-8150 - When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those will be sent along to the proxy too, which allows the program to for example send a separate HTTP request injected embedded in the URL. CVE-2014-8151 - libcurl stores TLS Session IDs in its associated Session ID cache when it connects to TLS servers. In subsequent connects it re-uses the entry in the cache to resume the TLS connection faster than when doing a full TLS handshake. The actual implementation for the Session ID caching varies depending on the underlying TLS backend. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni