kumquat-buildroot/package/libcurl/libcurl.hash

# Locally calculated after checking pgp signature
# https://curl.se/download/curl-7.83.1.tar.xz.asc
# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
sha256  2cb9c2356e7263a1272fd1435ef7cdebf2cd21400ec287b068396deb705c22c4  curl-7.83.1.tar.xz
sha256  321b1a09ebc30410f2e837c072e5521cf7095b757193af4a7dae1086e36ed31a  COPYING
package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-07-03 06:12:34 +02:00			`# Locally calculated after checking pgp signature`
package/libcurl: security bump to version 7.83.1 Fixes the following security issues: - CVE-2022-27778: curl removes wrong file on error https://curl.se/docs/CVE-2022-27778.html - CVE-2022-27779: cookie for trailing dot TLD https://curl.se/docs/CVE-2022-27779.html - CVE-2022-27780: percent-encoded path separator in URL host https://curl.se/docs/CVE-2022-27780.html - CVE-2022-27781: CERTINFO never-ending busy-loop https://curl.se/docs/CVE-2022-27781.html - CVE-2022-27782: TLS and SSH connection too eager reuse https://curl.se/docs/CVE-2022-27782.html - CVE-2022-30115: HSTS bypass via trailing dot https://curl.se/docs/CVE-2022-30115.html Drop now upstreamed 0001-mbedtls-fix-compile-when-h2-enabled.patch Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2022-05-11 12:07:06 +02:00			`# https://curl.se/download/curl-7.83.1.tar.xz.asc`
package/libcurl: bump to version 7.71.1 This release fixes build with BR2_PACKAGE_LIBCURL_PROXY_SUPPORT disabled and mbedtls enabled. Add reference to upstream tarball signature. Fixes: http://autobuild.buildroot.net/results/f32b6ab927560839cacaa1b9e6b64ced92b9ffe3/ http://autobuild.buildroot.net/results/566f0db496f6d1feefd9d3e6b6955a2539670735/ http://autobuild.buildroot.net/results/19de1111318aea863118c9b0b44dc282f011918f/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2020-07-03 06:12:34 +02:00			`# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2`
package/libcurl: security bump to version 7.83.1 Fixes the following security issues: - CVE-2022-27778: curl removes wrong file on error https://curl.se/docs/CVE-2022-27778.html - CVE-2022-27779: cookie for trailing dot TLD https://curl.se/docs/CVE-2022-27779.html - CVE-2022-27780: percent-encoded path separator in URL host https://curl.se/docs/CVE-2022-27780.html - CVE-2022-27781: CERTINFO never-ending busy-loop https://curl.se/docs/CVE-2022-27781.html - CVE-2022-27782: TLS and SSH connection too eager reuse https://curl.se/docs/CVE-2022-27782.html - CVE-2022-30115: HSTS bypass via trailing dot https://curl.se/docs/CVE-2022-30115.html Drop now upstreamed 0001-mbedtls-fix-compile-when-h2-enabled.patch Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2022-05-11 12:07:06 +02:00			`sha256 2cb9c2356e7263a1272fd1435ef7cdebf2cd21400ec287b068396deb705c22c4 curl-7.83.1.tar.xz`
package/libcurl: bump version to 7.82.0 Changelog: https://curl.se/changes.html Updated license hash due to copyright year bump: https://github.com/curl/curl/commit/0409192b1fde6b7a4f09667e80ca5dc555eab3f1 The NSS crypto backend requires a special option now, without it configure errors out with: configure: error: NSS use must be confirmed using --with-nss-deprecated. NSS support will be dropped from curl in August 2022. See docs/DEPRECATE.md Since it will be removed entirely soon anyway, and since this version doesn't fix any CVEs so doesn't need to be backported to stable branches, drop the NSS option entirely. Since NSS is going to be removed soon, drop the --without-nss as well. It is never going to be enabled automatically. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Arnout: drop NSS option entirely, as suggested by Baruch Siach.] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> 2022-03-13 14:04:24 +01:00			`sha256 321b1a09ebc30410f2e837c072e5521cf7095b757193af4a7dae1086e36ed31a COPYING`