package/libcurl: security bump to version 7.77.0
Fixes the following security issues: - CVE-2021-22897: schannel cipher selection surprise https://curl.se/docs/CVE-2021-22897.html - CVE-2021-22898: TELNET stack contents disclosure https://curl.se/docs/CVE-2021-22898.html - CVE-2021-22901: TLS session caching disaster https://curl.se/docs/CVE-2021-22901.html Unconditionally disable the ldap(s) options. These require external libraries, but the options were ignored if the needed libraries weren't available. This is now changed to be a fatal error since https://github.com/curl/curl/commit/dae382a1a1481a94b708c82d5aa9fa7253084160 Additionally, add a post-7.77.0 upstream patch to fix compilation with bearssl. Signed-off-by:Peter Korsgaard <peter@korsgaard.com> [yann.morin.1998@free.fr: annotate the patch, that it is a backport] Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
Loading
Please register or sign in to comment