Peter Korsgaard
eae15d62c6
Fixes the following security issues: - CVE-2021-22897: schannel cipher selection surprise https://curl.se/docs/CVE-2021-22897.html - CVE-2021-22898: TELNET stack contents disclosure https://curl.se/docs/CVE-2021-22898.html - CVE-2021-22901: TLS session caching disaster https://curl.se/docs/CVE-2021-22901.html Unconditionally disable the ldap(s) options. These require external libraries, but the options were ignored if the needed libraries weren't available. This is now changed to be a fatal error since https://github.com/curl/curl/commit/dae382a1a1481a94b708c82d5aa9fa7253084160 Additionally, add a post-7.77.0 upstream patch to fix compilation with bearssl. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> [yann.morin.1998@free.fr: annotate the patch, that it is a backport] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
6 lines
339 B
Plaintext
6 lines
339 B
Plaintext
# Locally calculated after checking pgp signature
|
|
# https://curl.haxx.se/download/curl-7.77.0.tar.xz.asc
|
|
# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
|
|
sha256 0f64582c54282f31c0de9f0a1a596b182776bd4df9a4c4a2a41bbeb54f62594b curl-7.77.0.tar.xz
|
|
sha256 6fd1a1c008b5ef4c4741dd188c3f8af6944c14c25afa881eb064f98fb98358e7 COPYING
|