CVS commit: [pkgsrc-2017Q1] pkgsrc/www/curl

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Wed Apr  5 21:16:45 UTC 2017

Modified Files:
        pkgsrc/www/curl [pkgsrc-2017Q1]: Makefile distinfo

Log Message:
Pullup ticket #5242 - requested by wiz
www/curl: security patch

Revisions pulled up:
- www/curl/Makefile                                             1.179
- www/curl/distinfo                                             1.129

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Apr  5 12:12:58 UTC 2017

   Modified Files:
        pkgsrc/www/curl: Makefile distinfo

   Log Message:
   Updated curl to 7.53.1nb1.

   Add upstream patch fixing CVE-2017-7407.

   To generate a diff of this commit:
   cvs rdiff -u -r1.178 -r1.179 pkgsrc/www/curl/Makefile
   cvs rdiff -u -r1.128 -r1.129 pkgsrc/www/curl/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.178 -r1.178.2.1 pkgsrc/www/curl/Makefile
cvs rdiff -u -r1.128 -r1.128.2.1 pkgsrc/www/curl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/curl/Makefile
diff -u pkgsrc/www/curl/Makefile:1.178 pkgsrc/www/curl/Makefile:1.178.2.1
--- pkgsrc/www/curl/Makefile:1.178      Sun Feb 26 08:37:46 2017
+++ pkgsrc/www/curl/Makefile    Wed Apr  5 21:16:45 2017
@@ -1,10 +1,15 @@
-# $NetBSD: Makefile,v 1.178 2017/02/26 08:37:46 adam Exp $
+# $NetBSD: Makefile,v 1.178.2.1 2017/04/05 21:16:45 spz Exp $
 
 DISTNAME=      curl-7.53.1
+PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES=  https://curl.haxx.se/download/
 EXTRACT_SUFX=  .tar.bz2
 
+PATCH_SITES=           https://curl.haxx.se/
+PATCHFILES=            CVE-2017-7407.patch
+PATCH_DIST_STRIP=      -p1
+
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://curl.haxx.se/
 COMMENT=       Client that groks URLs

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.128 pkgsrc/www/curl/distinfo:1.128.2.1
--- pkgsrc/www/curl/distinfo:1.128      Sun Feb 26 08:37:46 2017
+++ pkgsrc/www/curl/distinfo    Wed Apr  5 21:16:45 2017
@@ -1,5 +1,9 @@
-$NetBSD: distinfo,v 1.128 2017/02/26 08:37:46 adam Exp $
+$NetBSD: distinfo,v 1.128.2.1 2017/04/05 21:16:45 spz Exp $
 
+SHA1 (CVE-2017-7407.patch) = 46a1e234f2db11032696260630c1e51ecf525002
+RMD160 (CVE-2017-7407.patch) = 21c9a12c15f1774a336c00956348260669a36089
+SHA512 (CVE-2017-7407.patch) = 05ab29bef14abef013f2df9dee9ad5a449a0b24838f1376d4f53db9bb428c3769e264302ac9098563e9a2cc57b56c6fba9805581cae7f4a115d8be9f623714e3
+Size (CVE-2017-7407.patch) = 4652 bytes
 SHA1 (curl-7.53.1.tar.bz2) = ae4a14778ef9ac3aaeaa022243d6e26c0bf1362b
 RMD160 (curl-7.53.1.tar.bz2) = 9b8bee9e4833d65a4531c86a34011817aa1fea36
 SHA512 (curl-7.53.1.tar.bz2) = c668494d0e795f34b00505ca68ab41fbb475a1bccbcac1d0bbacbbbafa40a994472e100be18a0c10f8fa21b5b9bd3f4e66c1e68ff5423b13b82d829cbaefcd52