includes:
CVE-2018-1000300 CWE-122: Heap-based Buffer Overflow
CVE-2018-1000301 CWE-126: Buffer Over-read
https://curl.haxx.se/changes.html#7_60_0
Also refresh 0001-replace-krb5-config-with-pkg-config.patch and drop
configure_ac.patch, which we've apparently been dragging along
unnecessarily for the past 5 years:
c277bd6ce7
(From OE-Core rev: 4063c1e4b233b28ae14420a83960fd93b437a4a4)
(From OE-Core rev: 4decc8ca3bd1b6c1c67182782fe6019dc0efc4fa)
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
664b1d5379