kumquat-buildroot/package/libcurl/libcurl.hash

# Locally calculated after checking pgp signature
# https://curl.se/download/curl-7.83.0.tar.xz.asc
# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
sha256  bbff0e6b5047e773f3c3b084d80546cc1be4e354c09e419c2d0ef6116253511a  curl-7.83.0.tar.xz
sha256  321b1a09ebc30410f2e837c072e5521cf7095b757193af4a7dae1086e36ed31a  COPYING
package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-07-03 06:12:34 +02:00			`# Locally calculated after checking pgp signature`
package/libcurl: security bump version to 7.83.0 Changelog: https://curl.se/changes.html#7_83_0 Release notes: https://curl.se/news.html Fixes the following CVEs: CVE-2022-22576: OAUTH2 bearer bypass in connection re-use CVE-2022-27774: Credential leak on redirect CVE-2022-27775: Bad local IPv6 connection reuse CVE-2022-27776: Auth/cookie leak on redirect Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-04-29 07:12:06 +02:00			`# https://curl.se/download/curl-7.83.0.tar.xz.asc`
package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-07-03 06:12:34 +02:00			`# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2`
package/libcurl: security bump version to 7.83.0 Changelog: https://curl.se/changes.html#7_83_0 Release notes: https://curl.se/news.html Fixes the following CVEs: CVE-2022-22576: OAUTH2 bearer bypass in connection re-use CVE-2022-27774: Credential leak on redirect CVE-2022-27775: Bad local IPv6 connection reuse CVE-2022-27776: Auth/cookie leak on redirect Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2022-04-29 07:12:06 +02:00			`sha256 bbff0e6b5047e773f3c3b084d80546cc1be4e354c09e419c2d0ef6116253511a curl-7.83.0.tar.xz`
package/libcurl: bump version to 7.82.0 Changelog: https://curl.se/changes.html Updated license hash due to copyright year bump: https://github.com/curl/curl/commit/0409192b1fde6b7a4f09667e80ca5dc555eab3f1 The NSS crypto backend requires a special option now, without it configure errors out with: configure: error: NSS use must be confirmed using --with-nss-deprecated. NSS support will be dropped from curl in August 2022. See docs/DEPRECATE.md Since it will be removed entirely soon anyway, and since this version doesn't fix any CVEs so doesn't need to be backported to stable branches, drop the NSS option entirely. Since NSS is going to be removed soon, drop the --without-nss as well. It is never going to be enabled automatically. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Arnout: drop NSS option entirely, as suggested by Baruch Siach.] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-03-13 14:04:24 +01:00			`sha256 321b1a09ebc30410f2e837c072e5521cf7095b757193af4a7dae1086e36ed31a COPYING`