bagder: curl-www _changes.html, 1.108, 1.109 _newslog.html, 1.118, 1.119 Makefile, 1.87, 1.88 libcurl-tftp.patch, NONE, 1.1

Update of /cvsroot/curl/curl-www
In directory labb:/tmp/cvs-serv30857

Modified Files:
	_changes.html _newslog.html Makefile 
Added Files:
	libcurl-tftp.patch 
Log Message:
curl 7.15.3 - a security-fix release


Index: Makefile
===================================================================
RCS file: /cvsroot/curl/curl-www/Makefile,v
retrieving revision 1.87
retrieving revision 1.88
diff -u -d -r1.87 -r1.88
--- Makefile	27 Feb 2006 16:10:02 -0000	1.87
+++ Makefile	20 Mar 2006 07:52:43 -0000	1.88
@@ -5,8 +5,8 @@
 NOW=$(shell gnudate +'-D__TODAY__=%B %e, %Y')
 
 # the latest stable version is:
-STABLE= 7.15.2
-RELDATE = "27th of February 2006"
+STABLE= 7.15.3
+RELDATE = "20th of March 2006"
 
 # name of the dir to tempoary unpack and build zip files in:
 TEMPDIR=tempzip

--- NEW FILE: libcurl-tftp.patch ---
Index: lib/tftp.c
===================================================================
RCS file: /cvsroot/curl/curl/lib/tftp.c,v
retrieving revision 1.16
diff -u -r1.16 tftp.c
--- lib/tftp.c	8 Dec 2005 20:38:04 -0000	1.16
+++ lib/tftp.c	13 Mar 2006 12:30:32 -0000
@@ -271,7 +271,9 @@
       /* If we are downloading, send an RRQ */
       state->spacket.event = htons(TFTP_EVENT_RRQ);
     }
-    sprintf((char *)state->spacket.u.request.data, "%s%c%s%c",
+    snprintf((char *)state->spacket.u.request.data,
+             sizeof(state->spacket.u.request.data),
+             "%s%c%s%c",
             filename, '\0',  mode, '\0');
     sbytes = 4 + (int)strlen(filename) + (int)strlen(mode);
     sbytes = sendto(state->sockfd, (void *)&state->spacket,

Index: _changes.html
===================================================================
RCS file: /cvsroot/curl/curl-www/_changes.html,v
retrieving revision 1.108
retrieving revision 1.109
diff -u -d -r1.108 -r1.109
--- _changes.html	27 Feb 2006 18:05:06 -0000	1.108
+++ _changes.html	20 Mar 2006 07:52:43 -0000	1.109
@@ -45,6 +45,27 @@
 <li> <a href="http://curl.haxx.se/auto/cvshistory.html">recent CVS activity</a>
  </ul>
 
+SUBTITLE(Fixed in 7.15.3 - March 20 2006)
+<a href="http://curl.haxx.se/docs/adv_20060320.html"><img src="/pix/alert.png"
+align="right" alt="Release contains security-related bug fix" border="0"></a>
+<p> Changes:
+<ul>
+ <li> added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD
+</ul>
+<p> Bugfixes:
+<ul>
+ <li> <a href="http://curl.haxx.se/docs/adv_20060320.html">TFTP Packet Buffer Overflow Vulnerability</a>
+ <li> properly detecting problems with sending the FTP command USER
+ <li> wrong error message shown when certificate verification failed
+ <li> multi-part formpost with multi interface crash
+ <li> the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged
+ <li> "SSL: couldn't set callback" is now treated as a less serious problem
+ <li> Interix build fix
+ <li> fixed curl "hang" when out of file handles at start
+ <li> prevent FTP uploads to URLs with trailing slash
+</ul>
+
+
 SUBTITLE(Fixed in 7.15.2 - February 27 2006)
 <p> Changes:
 <ul>

Index: _newslog.html
===================================================================
RCS file: /cvsroot/curl/curl-www/_newslog.html,v
retrieving revision 1.118
retrieving revision 1.119
diff -u -d -r1.118 -r1.119
--- _newslog.html	27 Feb 2006 18:06:31 -0000	1.118
+++ _newslog.html	20 Mar 2006 07:52:43 -0000	1.119
@@ -34,6 +34,17 @@
  NCOLE
 #endif
 
+ NSUBJ(curl and libcurl 7.15.3)
+ NDATE(20 March 2006)
+ NCOLS
+
+  On curl's 8th birthday, we bring you a fresh new release!
+<p>
+  <a href="download.html">7.15.3</a> is here. Check out what <a
+  href="changes.html">changes</a> it contains!
+
+ NCOLE
+
  NSUBJ(curl and libcurl 7.15.2)
  NDATE(27 February 2006)
  NCOLS