buildroot/package/libcurl, branch 2016.11

libcurl: move site to https

2016-11-03T21:31:05+00:00

Saves a redirect. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libcurl: bump version to 7.51.0 (security)

2016-11-02T16:25:20+00:00

List of fixed CVEs: CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host Full ChangeLog: https://curl.haxx.se/changes.html#7_51_0 Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

libcurl: bump version to 7.50.3

2016-09-14T19:45:58+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.50.2

2016-09-07T10:17:28+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: security bump version to 7.50.1

2016-08-03T18:50:39+00:00

Contains fixes for CVE-2016-5419..5421: https://curl.haxx.se/docs/vuln-7.50.0.html [Peter: extend commit message with CVE info] Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.50.0

2016-07-21T11:56:15+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

libcurl: security bump version to 7.49.1

2016-05-31T10:59:10+00:00

Fixes CVE-2016-4802, https://curl.haxx.se/docs/adv_20160530.html Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.49.0

2016-05-23T15:05:24+00:00

Fixes CVE-2016-3739, https://curl.haxx.se/docs/adv_20160518.html. Signed-off-by: Vicente Olivert Riera [Thomas: add reference to the CVE being fixed, pointed by Gustavo.] Signed-off-by: Thomas Petazzoni

libcurl: bump to version 7.48.0

2016-03-25T19:54:27+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcurl: enable mbedtls support

2016-03-08T20:24:53+00:00

Now that we've got an mbedtls package in the tree we can enable the optional support for it in libcurl. We also remove the comment about polarssl support needing version 1.3.x. Indeed, polarssl was renamed to mbedtls when bought by ARM, which was circa the 1.3.x polarssl release. Due to this referring to polarssl 1.3.x doesn't make a lot of sense, and we'll probably never package polarssl 1.3.x in Buildroot now that mbedtls replaces it. Signed-off-by: Gustavo Zacarias Tested-by: Luca Ceresoli [Thomas: slightly improve commit log as suggested by Luca, using explanations from Gustavo.] Signed-off-by: Thomas Petazzoni