On Wed, 2015-04-22 at 12:24 -0500, Yaakov Selkowitz wrote: > The following packages have been updated in the Cygwin distribution: > > * curl-7.42.0-1 > * libcurl4-7.42.0-1 > * libcurl-devel-7.42.0-1 > * libcurl-doc-7.42.0-1 > > cURL is a library and command line tool for transferring data with URL > syntax, supporting numerous protocols, SSL certificates, HTTP POST, HTTP > PUT, FTP uploading, HTTP form based upload, proxies, cookies, user > +password authentication, file transfer resume, proxy tunneling and > more. > > This is an update to the latest upstream release, which includes a fix > for CVE-2014-8150:
Correction: fixes for CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, and CVE-2015-3148: > http://curl.haxx.se/changes.html#7_42_0 > http://curl.haxx.se/docs/adv_20150422A.html > http://curl.haxx.se/docs/adv_20150422B.html > http://curl.haxx.se/docs/adv_20150422C.html > http://curl.haxx.se/docs/adv_20150422D.html -- Yaakov -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple

