buildroot/package/libcurl, branch 2016.11.1

libcurl: security bump to 7.52.1

2016-12-23T21:57:06+00:00

Fixes CVE-2016-9594 - Unitilized random Libcurl's (new) internal function that returns a good 32bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. Signed-off-by: Peter Korsgaard (cherry picked from commit 72b6bf8f57569c14238d223bb6cc6fec7fd3af4d)

libcurl: security bump to 7.52.0

2016-12-23T21:56:26+00:00

Fixes CVE-2016-9586 - printf floating point buffer overflow For details, see: https://curl.haxx.se/docs/adv_20161221A.html Signed-off-by: Peter Korsgaard (cherry picked from commit 0c5beb6501707dd5cb80484562bf2b0cbe2b4423)

libcurl: move site to https

2016-11-03T21:31:05+00:00

Saves a redirect. Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

libcurl: bump version to 7.51.0 (security)

2016-11-02T16:25:20+00:00

List of fixed CVEs: CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host Full ChangeLog: https://curl.haxx.se/changes.html#7_51_0 Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

libcurl: bump version to 7.50.3

2016-09-14T19:45:58+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.50.2

2016-09-07T10:17:28+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: security bump version to 7.50.1

2016-08-03T18:50:39+00:00

Contains fixes for CVE-2016-5419..5421: https://curl.haxx.se/docs/vuln-7.50.0.html [Peter: extend commit message with CVE info] Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.50.0

2016-07-21T11:56:15+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

libcurl: security bump version to 7.49.1

2016-05-31T10:59:10+00:00

Fixes CVE-2016-4802, https://curl.haxx.se/docs/adv_20160530.html Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libcurl: bump version to 7.49.0

2016-05-23T15:05:24+00:00

Fixes CVE-2016-3739, https://curl.haxx.se/docs/adv_20160518.html. Signed-off-by: Vicente Olivert Riera [Thomas: add reference to the CVE being fixed, pointed by Gustavo.] Signed-off-by: Thomas Petazzoni