Lucene search

K
openwrtOpenWrt ProjectOPENWRT-SA-000011
HistoryMar 02, 2016 - 11:23 a.m.

curl: Security update (CVE-2016-0755)

2016-03-0211:23:11
OpenWrt Project
lists.openwrt.org
634

0.017 Low

EPSS

Percentile

86.3%

The curl package has been rebuilt and was uploaded to the Chaos Calmer
15.05 repository due to a reported security issue.

VERSION

7.40.0-3 => 7.40.0-3.1

CHANGELOG

[Wed, 2 Mar 2016 09:51:47 +0000 0914eea]

Bump pkg revision

[Tue, 1 Mar 2016 22:42:51 +0000 380df1a]

This fixes the following security problem: CVE-2016-0755: NTLM
credentials not-checked for proxy connection re-use
http://curl.haxx.se/docs/adv_20160127B.html

backport of r48614.

CHANGES

package/network/utils/curl/Makefile | 4 ±
…/curl/patches/018-CVE-2016-0755.patch | 126 +++++++++++++++++
2 files changed, 128 insertions(+), 2 deletions(-)