From 969ec949a8ec1b19009b0915582b359de2ec1d2a Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Mon, 1 Feb 2016 22:37:05 +0000 Subject: curl: update curl to version 7.47.0 This fixes the following security problems: CVE-2016-0754: remote file name path traversal in curl tool for Windows http://curl.haxx.se/docs/adv_20160127A.html CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use http://curl.haxx.se/docs/adv_20160127B.html Signed-off-by: Hauke Mehrtens SVN-Revision: 48614 --- package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch') diff --git a/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch b/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch index 1cdb820..abec7ad 100644 --- a/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch +++ b/package/network/utils/curl/patches/300-fix-disable-crypto-auth.patch @@ -11,7 +11,7 @@ unsigned char ntbuffer[0x18]; --- a/lib/vtls/vtls.c +++ b/lib/vtls/vtls.c -@@ -852,9 +852,9 @@ CURLcode Curl_ssl_md5sum(unsigned char * +@@ -921,9 +921,9 @@ CURLcode Curl_ssl_md5sum(unsigned char * unsigned char *md5sum, /* output */ size_t md5len) { -- cgit v1.1