NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
acf4a7d1c7
kumquat-buildroot/package/libcurl/libcurl.hash

6 lines
334 B
Plaintext
Raw Normal View History

package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-07-03 06:12:34 +02:00
# Locally calculated after checking pgp signature
package/libcurl: security bump to version 7.84.0 Fixes the following security issues: - CVE-2022-32205: Set-Cookie denial of service https://curl.se/docs/CVE-2022-32205.html - CVE-2022-32206: HTTP compression denial of service https://curl.se/docs/CVE-2022-32206.html - CVE-2022-32207: Unpreserved file permissions https://curl.se/docs/CVE-2022-32207.html - CVE-2022-32208: FTP-KRB bad message verification https://curl.se/docs/CVE-2022-32208.html Changelog: https://curl.se/changes.html Upstream removed configure option --enable-hidden-symbols: https://github.com/curl/curl/commit/0c2d3118aa2bc040411203d33ab6034067fd9d62 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Peter: mark as security bump] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-06-28 19:15:56 +02:00
# https://curl.se/download/curl-7.84.0.tar.xz.asc
package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-07-03 06:12:34 +02:00
# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
libcurl: security bump to version 7.86.0 Version 7.85.0 fixes CVE-2022-35252: When curl retrieves and parses cookies from an HTTP(S) server, it accepts cookies using control codes (byte values below 32). When cookies that contain such control codes are later sent back to an HTTP(S) server, it might make the server return a 400 response. Effectively allowing a "sister site" to deny service to siblings. Drop upstream patches and autoreconf. Cc: Matt Weber <matthew.weber@collins.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-27 12:37:17 +02:00
sha256 2d61116e5f485581f6d59865377df4463f2e788677ac43222b496d4e49fb627b curl-7.86.0.tar.xz
package/libcurl: bump version to 7.82.0 Changelog: https://curl.se/changes.html Updated license hash due to copyright year bump: https://github.com/curl/curl/commit/0409192b1fde6b7a4f09667e80ca5dc555eab3f1 The NSS crypto backend requires a special option now, without it configure errors out with: configure: error: NSS use must be confirmed using --with-nss-deprecated. NSS support will be dropped from curl in August 2022. See docs/DEPRECATE.md Since it will be removed entirely soon anyway, and since this version doesn't fix any CVEs so doesn't need to be backported to stable branches, drop the NSS option entirely. Since NSS is going to be removed soon, drop the --without-nss as well. It is never going to be enabled automatically. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Arnout: drop NSS option entirely, as suggested by Baruch Siach.] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-03-13 14:04:24 +01:00
sha256 321b1a09ebc30410f2e837c072e5521cf7095b757193af4a7dae1086e36ed31a COPYING
Reference in New Issue Copy Permalink