Security update to 7.19.4.

Rogue servers could trick curl into accessing local files; CVE-2009-0037.
avsm · Mar 6, 2009 · 29f390d · 29f390d
1 parent cf89d81
commit 29f390d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/net/curl/Makefile b/net/curl/Makefile
@@ -1,9 +1,9 @@
-# $OpenBSD: Makefile,v 1.65 2009/01/21 21:17:27 naddy Exp $
+# $OpenBSD: Makefile,v 1.66 2009/03/06 15:04:12 naddy Exp $
 
 COMMENT=	get files from FTP, Gopher, HTTP or HTTPS servers
 
-DISTNAME=	curl-7.19.3
-SHARED_LIBS +=  curl                 13.0     # .5.1
+DISTNAME=	curl-7.19.4
+SHARED_LIBS +=  curl                 13.1     # .5.1
 CATEGORIES=	net
 MASTER_SITES=	http://curl.haxx.se/download/ \
 		ftp://ftp.sunet.se/pub/www/utilities/curl/ \

diff --git a/net/curl/distinfo b/net/curl/distinfo
@@ -1,5 +1,5 @@
-MD5 (curl-7.19.3.tar.gz) = ghN69A0wwWVHdTmOXel7+g==
-RMD160 (curl-7.19.3.tar.gz) = j1BtyOClHt84TzvAQpRpbDhllPQ=
-SHA1 (curl-7.19.3.tar.gz) = 2K86aMm6N41WZB7RpaLpNmIBX4U=
-SHA256 (curl-7.19.3.tar.gz) = i9DLWXG/7R9fSlHc6eEJrLVorN2lvZ+C3cEfDDhIZSs=
-SIZE (curl-7.19.3.tar.gz) = 2906673
+MD5 (curl-7.19.4.tar.gz) = OkrD4bDkFFASldAUD6RPuQ==
+RMD160 (curl-7.19.4.tar.gz) = 2sCoPQUFQ7ZW8xI7HiZg4fPrJWA=
+SHA1 (curl-7.19.4.tar.gz) = Vs8Dy9TpzQywSAGzNdEXb2kXTSA=
+SHA256 (curl-7.19.4.tar.gz) = y5jzW7C3zm4Fm3tj1PG3hiRM9l/NmcJ7BHLKs9NEQ8U=
+SIZE (curl-7.19.4.tar.gz) = 2951613