buildroot/package/libcurl, branch 2016.02

libcurl: bump to version 7.47.1

2016-02-08T20:26:09+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/libcurl: security bump version to 7.47.0

2016-01-28T21:29:08+00:00

Fixes CVE-2016-0754: remote file name path traversal in curl tool for Windows CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.46.0

2015-12-02T20:27:30+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

package/libcurl: carefully override LD_LIBRARY_PATH

2015-11-17T09:00:26+00:00

To build libcurl, we need to override LD_LIBRARY and force it to a sane value, otherwise libcurl is confused when target == host (see a51ce319, libcurl: fix configure with openssl when target == host). That is currently OK, since we always set LD_LIBRARY_PATH to a non-empty value. However, we're soon to stop setting it at all. So, if the user has an empty (or no) LD_LIBRARY_PATH in his envirnment, we'd end up adding the current working directory to LD_LIBRARY_PATH (as an empty entry in a colon-separated list is most probably interpreted as meaning the current working directory, which we do know can cause issue, and which we expressely check against in support/dependencies/dependencies.sh Fix that by only using an existing LD_LIBRARY_PATH if it is not empty. Also use a Makefile construct as it is easier to read than a shell one (we can do that, as all variables from the environment are available as make variables). Signed-off-by: "Yann E. MORIN" Cc: Peter Korsgaard Cc: Thomas Petazzoni Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

libcurl: fix license typo

2015-10-27T21:50:56+00:00

The license for libcurl is actually 'ISC' not 'ICS'. Signed-off-by: Ryan Barnett Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.45.0

2015-10-08T15:06:51+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.44.0

2015-09-04T09:57:05+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump to version 7.43.0

2015-06-18T20:41:32+00:00

- Bump to version 7.43.0 - Update hash file Signed-off-by: Vicente Olivert Riera Acked-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcurl: use c-ares if available

2015-05-03T17:25:24+00:00

By default libcurl uses the C library's DNS resolver which is synchronous, even if an application is using libcurl's non-blocking mode of operation. Configure libcurl to use c-ares if it is selected so that it can resolve addresses asynchronously if required. [Peter: explicitly disable c-ares support if not enabled] Signed-off-by: John Keeping Signed-off-by: Peter Korsgaard

libcurl: security bump to version 7.42.1

2015-04-29T21:27:02+00:00

Fixes: CVE-2013-3153 - sensitive HTTP server headers also sent to proxies. And drop upstream patches. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard