Author: truckman
Date: Thu Aug 11 17:48:11 2016
New Revision: 1756017

URL: http://svn.apache.org/viewvc?rev=1756017&view=rev
Log:
Upgrade bundled curl to version 7.50.1 to fix:
        CVE-2016-5419
        CVE-2016-5420
        CVE-2016-5421
Whether any of these affect the OpenOffice usage of curl is not known.
OpenOffice only uses curl to access ftp:// URLs, which is likely to be
only rarely done.


Added:
    openoffice/trunk/main/curl/curl-7.50.1_win.patch
      - copied, changed from r1756016, 
openoffice/trunk/main/curl/curl-7.49.1_win.patch
Removed:
    openoffice/trunk/main/curl/curl-7.49.1_win.patch
Modified:
    openoffice/trunk/main/curl/makefile.mk
    openoffice/trunk/main/external_deps.lst

Copied: openoffice/trunk/main/curl/curl-7.50.1_win.patch (from r1756016, 
openoffice/trunk/main/curl/curl-7.49.1_win.patch)
URL: 
http://svn.apache.org/viewvc/openoffice/trunk/main/curl/curl-7.50.1_win.patch?p2=openoffice/trunk/main/curl/curl-7.50.1_win.patch&p1=openoffice/trunk/main/curl/curl-7.49.1_win.patch&r1=1756016&r2=1756017&rev=1756017&view=diff
==============================================================================
--- openoffice/trunk/main/curl/curl-7.49.1_win.patch (original)
+++ openoffice/trunk/main/curl/curl-7.50.1_win.patch Thu Aug 11 17:48:11 2016
@@ -1,6 +1,6 @@
-diff -ur misc/curl-7.49.1/winbuild/Makefile.msvc.names 
misc/build/curl-7.49.1/winbuild/Makefile.msvc.names
---- misc/curl-7.49.1/winbuild/Makefile.msvc.names      2016-03-22 
00:15:38.000000000 -0700
-+++ misc/build/curl-7.49.1/winbuild/Makefile.msvc.names        2016-07-19 
15:35:28.465823000 -0700
+diff -ur misc/curl-7.50.1/winbuild/Makefile.msvc.names 
misc/build/curl-7.50.1/winbuild/Makefile.msvc.names
+--- misc/curl-7.50.1/winbuild/Makefile.msvc.names      2016-03-22 
00:15:38.000000000 -0700
++++ misc/build/curl-7.50.1/winbuild/Makefile.msvc.names        2016-07-19 
15:35:28.465823000 -0700
 @@ -43,7 +43,7 @@
  !ENDIF
  

Modified: openoffice/trunk/main/curl/makefile.mk
URL: 
http://svn.apache.org/viewvc/openoffice/trunk/main/curl/makefile.mk?rev=1756017&r1=1756016&r2=1756017&view=diff
==============================================================================
--- openoffice/trunk/main/curl/makefile.mk (original)
+++ openoffice/trunk/main/curl/makefile.mk Thu Aug 11 17:48:11 2016
@@ -37,12 +37,12 @@ all:
 
 # --- Files --------------------------------------------------------
 
-TARFILE_NAME=curl-7.49.1
-TARFILE_MD5=2feb3767b958add6a177c6602ff21e8c
+TARFILE_NAME=curl-7.50.1
+TARFILE_MD5=c264788f2e4313a05140d712c1ec90c2
 PATCH_FILES=
 
 .IF "$(GUI)"=="WNT"
-       PATCH_FILES+=curl-7.49.1_win.patch
+       PATCH_FILES+=curl-7.50.1_win.patch
 #      .IF "$(COM)"=="GCC"
 #              PATCH_FILES+=curl-7.19.7_mingw.patch
 #      .ENDIF

Modified: openoffice/trunk/main/external_deps.lst
URL: 
http://svn.apache.org/viewvc/openoffice/trunk/main/external_deps.lst?rev=1756017&r1=1756016&r2=1756017&view=diff
==============================================================================
--- openoffice/trunk/main/external_deps.lst (original)
+++ openoffice/trunk/main/external_deps.lst Thu Aug 11 17:48:11 2016
@@ -227,9 +227,9 @@ if (SYSTEM_EXPAT != YES)
     URL2 = $(OOO_EXTRAS)$(MD5)-$(name)
 
 if (SYSTEM_CURL != YES)
-    MD5 = 2feb3767b958add6a177c6602ff21e8c
-    name = curl-7.49.1.tar.gz
-    URL1 = http://curl.haxx.se/download/curl-7.49.1.tar.gz
+    MD5 = c264788f2e4313a05140d712c1ec90c2
+    name = curl-7.50.1.tar.gz
+    URL1 = http://curl.haxx.se/download/${name}
     URL2 = $(OOO_EXTRAS)$(MD5)-$(name)
 
 if (WITH_CATA_FONTS == YES)


Reply via email to