curl: Upgrade 7.47.1 -> 7.53.1

Security vulnerabilities fixed between 7.47.1 and 7.53.1 versions:
=================================================================
TLS session resumption client cert bypass (again): CVE-2017-XXXX
--write-out out of buffer read: CVE-2017-7407
SSL_VERIFYSTATUS ignored: CVE-2017-2629
uninitialized random: CVE-2016-9594
printf floating point buffer overflow: CVE-2016-9586
Win CE schannel cert wildcard matches too much: CVE-2016-9952
Win CE schannel cert name out of buffer read: CVE-2016-9953
cookie injection for other servers: CVE-2016-8615
case insensitive password comparison: CVE-2016-8616
OOB write via unchecked multiplication: CVE-2016-8617
double-free in curl_maprintf: CVE-2016-8618
double-free in krb5 code: CVE-2016-8619
glob parser write/read out of bounds: CVE-2016-8620
curl_getdate read out of bounds: CVE-2016-8621
URL unescape heap overflow via integer truncation: CVE-2016-8622
Use-after-free via shared cookies: CVE-2016-8623
invalid URL parsing with '#': CVE-2016-8624
IDNA 2003 makes curl use wrong host: CVE-2016-8625
curl escape and unescape integer overflows: CVE-2016-7167
Incorrect reuse of client certificates: CVE-2016-7141
TLS session resumption client cert bypass: CVE-2016-5419
Re-using connections with wrong client cert: CVE-2016-5420
use of connection struct after free: CVE-2016-5421
Windows DLL hijacking: CVE-2016-4802
TLS certificate check bypass with mbedTLS/PolarSSL: CVE-2016-3739

Reference:
https://curl.haxx.se/docs/security.html
https://curl.haxx.se/changes.html

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>

1 files changed, 0 insertions, 77 deletions

diff --git a/meta/recipes-support/curl/curl/CVE-2016-8615.patch b/meta/recipes-support/curl/curl/CVE-2016-8615.patch
deleted file mode 100644
index 5faa423a2a..0000000000
--- a/meta/recipes-support/curl/curl/CVE-2016-8615.patch
+++ /dev/null
@@ -1,77 +0,0 @@
-From 1620f552a277ed5b23a48b9c27dbf07663cac068 Mon Sep 17 00:00:00 2001
-From: Daniel Stenberg <daniel@haxx.se>
-Date: Tue, 27 Sep 2016 17:36:19 +0200
-Subject: [PATCH] cookie: replace use of fgets() with custom version
-
-... that will ignore lines that are too long to fit in the buffer.
-
-CVE: CVE-2016-8615
-Upstream-Status: Backport
-
-Bug: https://curl.haxx.se/docs/adv_20161102A.html
-Reported-by: Cure53
-Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
----
- lib/cookie.c | 31 ++++++++++++++++++++++++++++++-
- 1 file changed, 30 insertions(+), 1 deletion(-)
-
-diff --git a/lib/cookie.c b/lib/cookie.c
-index 0f05da2..e5097d3 100644
---- a/lib/cookie.c
-+++ b/lib/cookie.c
-@@ -901,10 +901,39 @@ Curl_cookie_add(struct Curl_easy *data,
-   }
- 
-   return co;
- }
- 
-+/*
-+ * get_line() makes sure to only return complete whole lines that fit in 'len'
-+ * bytes and end with a newline.
-+ */
-+static char *get_line(char *buf, int len, FILE *input)
-+{
-+  bool partial = FALSE;
-+  while(1) {
-+    char *b = fgets(buf, len, input);
-+    if(b) {
-+      size_t rlen = strlen(b);
-+      if(rlen && (b[rlen-1] == '\n')) {
-+        if(partial) {
-+          partial = FALSE;
-+          continue;
-+        }
-+        return b;
-+      }
-+      else
-+        /* read a partial, discard the next piece that ends with newline */
-+        partial = TRUE;
-+    }
-+    else
-+      break;
-+  }
-+  return NULL;
-+}
-+
-+
- /*****************************************************************************
-  *
-  * Curl_cookie_init()
-  *
-  * Inits a cookie struct to read data from a local file. This is always
-@@ -957,11 +986,11 @@ struct CookieInfo *Curl_cookie_init(struct Curl_easy *data,
-     bool headerline;
- 
-     line = malloc(MAX_COOKIE_LINE);
-     if(!line)
-       goto fail;
--    while(fgets(line, MAX_COOKIE_LINE, fp)) {
-+    while(get_line(line, MAX_COOKIE_LINE, fp)) {
-       if(checkprefix("Set-Cookie:", line)) {
-         /* This is a cookie line, get it! */
-         lineptr=&line[11];
-         headerline=TRUE;
-       }
--- 
-2.9.3
-