diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2016-02-01 22:37:05 +0000 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2016-02-01 22:37:05 +0000 |
| commit | 969ec949a8ec1b19009b0915582b359de2ec1d2a (patch) | |
| tree | 45306613ec029e5d1bf22aeb3184ac271d80719d /package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch | |
| parent | 29044db278fba5c839ff2812ad7e3c2e79570faa (diff) | |
| download | mtk-20170518-969ec949a8ec1b19009b0915582b359de2ec1d2a.zip mtk-20170518-969ec949a8ec1b19009b0915582b359de2ec1d2a.tar.gz mtk-20170518-969ec949a8ec1b19009b0915582b359de2ec1d2a.tar.bz2 | |
curl: update curl to version 7.47.0
This fixes the following security problems:
CVE-2016-0754: remote file name path traversal in curl tool for Windows
http://curl.haxx.se/docs/adv_20160127A.html
CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use
http://curl.haxx.se/docs/adv_20160127B.html
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 48614
Diffstat (limited to 'package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch')
| -rw-r--r-- | package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch b/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch index 1cdb820..abec7ad 100644 --- a/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch +++ b/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch @@ -11,7 +11,7 @@ unsigned char ntbuffer[0x18]; --- a/lib/vtls/vtls.c +++ b/lib/vtls/vtls.c -@@ -852,9 +852,9 @@ CURLcode Curl_ssl_md5sum(unsigned char * +@@ -921,9 +921,9 @@ CURLcode Curl_ssl_md5sum(unsigned char * unsigned char *md5sum, /* output */ size_t md5len) { |