[pkgsrc/pkgsrc-2017Q1]: pkgsrc/www/curl Pullup ticket #5242 - requested by wiz

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/2dbe95d3faf0
branches:  pkgsrc-2017Q1
changeset: 360216:2dbe95d3faf0
user:      spz <spz%pkgsrc.org@localhost>
date:      Wed Apr 05 21:16:45 2017 +0000

description:
Pullup ticket #5242 - requested by wiz
www/curl: security patch

Revisions pulled up:
- www/curl/Makefile                                             1.179
- www/curl/distinfo                                             1.129

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Apr  5 12:12:58 UTC 2017

   Modified Files:
        pkgsrc/www/curl: Makefile distinfo

   Log Message:
   Updated curl to 7.53.1nb1.

   Add upstream patch fixing CVE-2017-7407.


   To generate a diff of this commit:
   cvs rdiff -u -r1.178 -r1.179 pkgsrc/www/curl/Makefile
   cvs rdiff -u -r1.128 -r1.129 pkgsrc/www/curl/distinfo

diffstat:

 www/curl/Makefile |  7 ++++++-
 www/curl/distinfo |  6 +++++-
 2 files changed, 11 insertions(+), 2 deletions(-)

diffs (34 lines):

diff -r 063b36e480ed -r 2dbe95d3faf0 www/curl/Makefile
--- a/www/curl/Makefile Wed Apr 05 19:49:29 2017 +0000
+++ b/www/curl/Makefile Wed Apr 05 21:16:45 2017 +0000
@@ -1,10 +1,15 @@
-# $NetBSD: Makefile,v 1.178 2017/02/26 08:37:46 adam Exp $
+# $NetBSD: Makefile,v 1.178.2.1 2017/04/05 21:16:45 spz Exp $
 
 DISTNAME=      curl-7.53.1
+PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES=  https://curl.haxx.se/download/
 EXTRACT_SUFX=  .tar.bz2
 
+PATCH_SITES=           https://curl.haxx.se/
+PATCHFILES=            CVE-2017-7407.patch
+PATCH_DIST_STRIP=      -p1
+
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://curl.haxx.se/
 COMMENT=       Client that groks URLs
diff -r 063b36e480ed -r 2dbe95d3faf0 www/curl/distinfo
--- a/www/curl/distinfo Wed Apr 05 19:49:29 2017 +0000
+++ b/www/curl/distinfo Wed Apr 05 21:16:45 2017 +0000
@@ -1,5 +1,9 @@
-$NetBSD: distinfo,v 1.128 2017/02/26 08:37:46 adam Exp $
+$NetBSD: distinfo,v 1.128.2.1 2017/04/05 21:16:45 spz Exp $
 
+SHA1 (CVE-2017-7407.patch) = 46a1e234f2db11032696260630c1e51ecf525002
+RMD160 (CVE-2017-7407.patch) = 21c9a12c15f1774a336c00956348260669a36089
+SHA512 (CVE-2017-7407.patch) = 05ab29bef14abef013f2df9dee9ad5a449a0b24838f1376d4f53db9bb428c3769e264302ac9098563e9a2cc57b56c6fba9805581cae7f4a115d8be9f623714e3
+Size (CVE-2017-7407.patch) = 4652 bytes
 SHA1 (curl-7.53.1.tar.bz2) = ae4a14778ef9ac3aaeaa022243d6e26c0bf1362b
 RMD160 (curl-7.53.1.tar.bz2) = 9b8bee9e4833d65a4531c86a34011817aa1fea36
 SHA512 (curl-7.53.1.tar.bz2) = c668494d0e795f34b00505ca68ab41fbb475a1bccbcac1d0bbacbbbafa40a994472e100be18a0c10f8fa21b5b9bd3f4e66c1e68ff5423b13b82d829cbaefcd52