diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2019-05-17 22:40:26 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2019-05-30 12:15:20 +0200 |
| commit | dc1b578a4cc1d7ec154a58baf3a813846c5adf9d (patch) | |
| tree | e78010a927c172ef05b54d75bd178a451235a1bb /package/network/utils/curl/Makefile | |
| parent | 40ed8389efbb4011c83b6d343412a54634d0c731 (diff) | |
| download | upstream-dc1b578a4cc1d7ec154a58baf3a813846c5adf9d.tar.gz upstream-dc1b578a4cc1d7ec154a58baf3a813846c5adf9d.tar.bz2 upstream-dc1b578a4cc1d7ec154a58baf3a813846c5adf9d.zip | |
curl: Fix multiple security problems
This fixes the following security problems:
* CVE-2018-14618: NTLM password overflow via integer overflow
* CVE-2018-16839: SASL password overflow via integer overflow
* CVE-2018-16840: use-after-free in handle close
* CVE-2018-16842: warning message out-of-buffer read
* CVE-2019-3823: SMTP end-of-response out-of-bounds read
* CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
* CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'package/network/utils/curl/Makefile')
| -rw-r--r-- | package/network/utils/curl/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/network/utils/curl/Makefile b/package/network/utils/curl/Makefile index b4e3fd9d99..c7e7829edc 100644 --- a/package/network/utils/curl/Makefile +++ b/package/network/utils/curl/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=curl PKG_VERSION:=7.60.0 -PKG_RELEASE:=3 +PKG_RELEASE:=4 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=https://dl.uxnr.de/mirror/curl/ \ |