security update to 7.24.0, fixes

* URL sanitization vulnerability (CVE-2012-0036)
* SSL CBC IV vulnerability
This commit is contained in:
naddy 2012-01-26 20:09:08 +00:00
parent 3c51fa2f94
commit bfc56fb001
4 changed files with 8 additions and 30 deletions

View File

@ -1,9 +1,9 @@
# $OpenBSD: Makefile,v 1.80 2011/12/10 17:28:13 stsp Exp $ # $OpenBSD: Makefile,v 1.81 2012/01/26 20:09:08 naddy Exp $
COMMENT= get files from FTP, Gopher, HTTP or HTTPS servers COMMENT= get files from FTP, Gopher, HTTP or HTTPS servers
DISTNAME= curl-7.23.1 DISTNAME= curl-7.24.0
SHARED_LIBS= curl 21.0 # .6.0 SHARED_LIBS= curl 22.0 # .6.0
CATEGORIES= net CATEGORIES= net
MASTER_SITES= http://curl.haxx.se/download/ \ MASTER_SITES= http://curl.haxx.se/download/ \
ftp://ftp.sunet.se/pub/www/utilities/curl/ ftp://ftp.sunet.se/pub/www/utilities/curl/

View File

@ -1,5 +1,5 @@
MD5 (curl-7.23.1.tar.gz) = jiMVH1aftUr+8JOsBpUHfQ== MD5 (curl-7.24.0.tar.gz) = uTQg+AorqqYaD0UhTt3Cug==
RMD160 (curl-7.23.1.tar.gz) = +i50LaSM1r8kQY1rsfDPTmsbRuI= RMD160 (curl-7.24.0.tar.gz) = qO6WCT8+MuMbhm9LifcSsIo3rm0=
SHA1 (curl-7.23.1.tar.gz) = NX4GyOiwPWTn+GbSSvyvcUVQ5Tc= SHA1 (curl-7.24.0.tar.gz) = Pw0hLqMjj/NDC/jzZZ90Wywfcwo=
SHA256 (curl-7.23.1.tar.gz) = Vg5myyflSNB8GYwwW+MHL7m2JvvHfMzPtUel9UjH+bM= SHA256 (curl-7.24.0.tar.gz) = k2q5LMlyQIGAd2Z2xM+gyqZpYoObHJwgPhGfkfN+eAE=
SIZE (curl-7.23.1.tar.gz) = 3004596 SIZE (curl-7.24.0.tar.gz) = 3050092

View File

@ -1,11 +0,0 @@
$OpenBSD: patch-docs_examples_anyauthput_c,v 1.3 2011/09/19 10:25:01 naddy Exp $
--- docs/examples/anyauthput.c.orig Mon Sep 19 11:14:28 2011
+++ docs/examples/anyauthput.c Mon Sep 19 11:14:43 2011
@@ -27,6 +27,7 @@
# ifdef __VMS
typedef int intptr_t;
# endif
+# include <stdint.h>
# include <unistd.h>
#endif
#include <sys/types.h>

View File

@ -1,11 +0,0 @@
$OpenBSD: patch-docs_examples_externalsocket_c,v 1.2 2011/12/06 14:44:46 naddy Exp $
--- docs/examples/externalsocket.c.orig Fri Nov 4 23:32:54 2011
+++ docs/examples/externalsocket.c Mon Dec 5 23:47:34 2011
@@ -36,6 +36,7 @@
#else
#include <sys/types.h> /* socket types */
#include <sys/socket.h> /* socket definitions */
+#include <netinet/in.h>
#include <arpa/inet.h> /* inet (3) funtions */
#include <unistd.h> /* misc. UNIX functions */
#endif