Jelajahi Sumber

package/libcurl: security bump version to 7.47.0

Fixes
CVE-2016-0754: remote file name path traversal in curl tool for Windows
CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls 9 tahun lalu
induk
melakukan
4adae5d2ea
2 mengubah file dengan 3 tambahan dan 3 penghapusan
  1. 2 2
      package/libcurl/libcurl.hash
  2. 1 1
      package/libcurl/libcurl.mk

+ 2 - 2
package/libcurl/libcurl.hash

@@ -1,2 +1,2 @@
-# Locally calculated after checking pgp signature
-sha256 b7d726cdd8ed4b6db0fa1b474a3c59ebbbe4dcd4c61ac5e7ade0e0270d3195ad  curl-7.46.0.tar.bz2
+# Locally calculated
+sha256	2b096f9387fb9b2be08d17e518c62b6537b1f4d4bb59111d5b4fa0272f383f66	curl-7.47.0.tar.bz2

+ 1 - 1
package/libcurl/libcurl.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBCURL_VERSION = 7.46.0
+LIBCURL_VERSION = 7.47.0
 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.bz2
 LIBCURL_SITE = http://curl.haxx.se/download
 LIBCURL_DEPENDENCIES = host-pkgconf \