curl: bump to 7.64.0
authorDeng Qingfang <dengqf6@mail2.sysu.edu.cn>
Fri, 8 Feb 2019 03:07:04 +0000 (11:07 +0800)
committerHans Dedecker <dedeckeh@gmail.com>
Fri, 8 Feb 2019 07:37:24 +0000 (08:37 +0100)
Fixed CVEs:

CVE-2018-16890
CVE-2019-3822
CVE-2019-3823

For other changes in version 7.64.0 see https://curl.haxx.se/changes.html#7_64_0

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
package/network/utils/curl/Makefile
package/network/utils/curl/patches/310-mbedtls-disable-runtime-version-check.patch

index 4d6674b818dc53c5b80e0478dd64f42b4985c201..16c7466ee355970166c068d76dd63c7842d1f402 100644 (file)
@@ -8,15 +8,15 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=curl
-PKG_VERSION:=7.63.0
-PKG_RELEASE:=2
+PKG_VERSION:=7.64.0
+PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=https://dl.uxnr.de/mirror/curl/ \
        https://curl.mirror.anstey.ca/ \
        https://curl.askapache.com/download/ \
        https://curl.haxx.se/download/
-PKG_HASH:=9600234c794bfb8a0d3f138e9294d60a20e7a5f10e35ece8cf518e2112d968c4
+PKG_HASH:=2f2f13fa34d44aa29cb444077ad7dc4dc6d189584ad552e0aaeb06e608af6001
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=COPYING
index 87b6492a97607afef2f37aead565d689d5781b56..1d80e2f8118f78bef1e54506b2051cca78f8b67e 100644 (file)
@@ -1,6 +1,6 @@
 --- a/lib/vtls/mbedtls.c
 +++ b/lib/vtls/mbedtls.c
-@@ -811,7 +811,7 @@ static void Curl_mbedtls_session_free(vo
+@@ -813,7 +813,7 @@ static void Curl_mbedtls_session_free(vo
  
  static size_t Curl_mbedtls_version(char *buffer, size_t size)
  {