[curl/curl] bbb715: schannel: don't use static to store selected ciphers

Daniel Stenberg <[email protected]> Mon, 24 May 2021 04:15:53 -0700
Newsgroups gmane.comp.web.curl.cvs
Message-ID <curl/curl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/curl/curl
  Commit: bbb71507b7bab52002f9b1e0880bed6a32834511
      https://github.com/curl/curl/commit/bbb71507b7bab52002f9b1e0880bed6a32834511
  Author: Daniel Stenberg <[email protected]>
  Date:   2021-05-24 (Mon, 24 May 2021)

  Changed paths:
    M lib/vtls/schannel.c
    M lib/vtls/schannel.h

  Log Message:
  -----------
  schannel: don't use static to store selected ciphers

CVE-2021-22897

Bug: https://curl.se/docs/CVE-2021-22897.html


  Commit: 39ce47f219b09c380b81f89fe54ac586c8db6bde
      https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
  Author: Harry Sintonen <[email protected]>
  Date:   2021-05-24 (Mon, 24 May 2021)

  Changed paths:
    M lib/telnet.c

  Log Message:
  -----------
  telnet: check sscanf() for correct number of matches

CVE-2021-22898

Bug: https://curl.se/docs/CVE-2021-22898.html


  Commit: 7f4a9a9b2a49547eae24d2e19bc5c346e9026479
      https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479
  Author: Harry Sintonen <[email protected]>
  Date:   2021-05-24 (Mon, 24 May 2021)

  Changed paths:
    M lib/multi.c
    M lib/vtls/gskit.c
    M lib/vtls/gtls.c
    M lib/vtls/mbedtls.c
    M lib/vtls/mesalink.c
    M lib/vtls/nss.c
    M lib/vtls/openssl.c
    M lib/vtls/rustls.c
    M lib/vtls/schannel.c
    M lib/vtls/sectransp.c
    M lib/vtls/vtls.c
    M lib/vtls/vtls.h
    M lib/vtls/wolfssl.c

  Log Message:
  -----------
  openssl: associate/detach the transfer from connection

CVE-2021-22901

Bug: https://curl.se/docs/CVE-2021-22901.html


Compare: https://github.com/curl/curl/compare/b03b82a85fdb...7f4a9a9b2a49
_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits