Pullup ticket #5079 - requested by sevan

www/curl: security fix

Revisions pulled up:
- www/curl/Makefile                                             1.168-1.169
- www/curl/PLIST                                                1.59
- www/curl/distinfo                                             1.120-1.121

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Sun Jul 24 18:38:34 UTC 2016

   Modified Files:
           pkgsrc/www/curl: Makefile distinfo

   Log Message:
   Updated curl to 7.50.0.

    Fixed in 7.50.0 - July 21 2016

   Changes:

       http: add CURLINFO_HTTP_VERSION and %{http_version}

   Bugfixes:

       memdebug: fix MSVC crash with -DMEMDEBUG_LOG_SYNC
       openssl: fix build with OPENSSL_NO_COMP
       mbedtls: removed unused variables
       cmake: Added missing mbedTLS support
       URL parser: allow URLs to use one, two or three slashes
       curl: fix -q [regression]
       openssl: Use correct buffer sizes for error messages
       curl: fix SIGSEGV while parsing URL with too many globs
       schannel: add CURLOPT_CERTINFO support
       vtls: fix ssl session cache race condition
       http: Fix HTTP/2 connection reuse [regression]
       checksrc: Add LoadLibrary to the banned functions list
       schannel: Disable ALPN on Windows < 8.1
       configure: occasional ignorance of --enable-symbol-hiding with GCC
       http2: test17xx are the first real HTTP/2 tests
       resolve: add support for IPv6 DNS64/NAT64 Networks on OS X + iOS
       curl_multi_socket_action.3: rewording
       CURLOPT_POSTFIELDS.3: Clarify what happens when set empty
       cmake: Fix build with winldap
       openssl: fix cert check with non-DNS name fields present
       curl.1: mention the units for the progress meter
       openssl: use more 'const' to fix build warnings with 1.1.0 branch
       cmake: now using BUILD_TESTING=ON/OFF
       vtls: Only call add/getsession if session id is enabled
       headers: forward declare CURL, CURLM and CURLSH as structs
       configure: improve detection of CA bundle path on FreeBSD
       SFTP: set a generic error when no SFTP one exists
       curl_global_init.3: expand on the SSL and WIN32 bits purpose
       conn: don't free easy handle data in handler->disconnect
       cookie.c: Fix misleading indentation
       library: Fix memory leaks found during static analysis
       CURLMOPT_SOCKETFUNCTION.3: fix typo
       curl_global_init: moved the "IPv6 works" check here
       connect: disable TFO on Linux when using SSL
       vauth: Fixed memory leak due to function returning without free
       winbuild: fix embedded manifest option

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Wed Aug  3 08:57:51 UTC 2016

   Modified Files:
           pkgsrc/www/curl: Makefile PLIST distinfo

   Log Message:
   Updated curl to 7.50.1.

    Bugfixes:

       TLS: switch off SSL session id when client cert is used
       TLS: only reuse connections with the same client cert
       curl_multi_cleanup: clear connection pointer for easy handles
       include the CURLINFO_HTTP_VERSION man page into the release tarball
       include the http2-server.pl script in the release tarball
       test558: fix test by stripping file paths from FD lines
       spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration
       tests: Fix for http/2 feature
       cmake: Fix for schannel support
       curl.h: make public types void * again
       win32: fix a potential memory leak in Curl_load_library
       travis: fix OSX build by re-installing libtool
       mbedtls: Fix debug function name

3 files changed, 9 insertions, 8 deletions

diff --git a/www/curl/Makefile b/www/curl/Makefile
index 5ebccc37e5d..63cc3a0c080 100644
--- a/www/curl/Makefile
+++ b/www/curl/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.166 2016/05/30 11:42:19 jklos Exp $
+# $NetBSD: Makefile,v 1.166.2.1 2016/08/10 17:06:46 bsiegert Exp $
 
-DISTNAME=	curl-7.49.1
+DISTNAME=	curl-7.50.1
 CATEGORIES=	www
 MASTER_SITES=	https://curl.haxx.se/download/
 EXTRACT_SUFX=	.tar.bz2
diff --git a/www/curl/PLIST b/www/curl/PLIST
index 43c80ce95c4..ffe6c5c2cd5 100644
--- a/www/curl/PLIST
+++ b/www/curl/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.58 2016/05/30 14:25:12 prlw1 Exp $
+@comment $NetBSD: PLIST,v 1.58.2.1 2016/08/10 17:06:46 bsiegert Exp $
 bin/curl
 bin/curl-config
 include/curl/curl.h
@@ -29,6 +29,7 @@ man/man3/CURLINFO_FTP_ENTRY_PATH.3
 man/man3/CURLINFO_HEADER_SIZE.3
 man/man3/CURLINFO_HTTPAUTH_AVAIL.3
 man/man3/CURLINFO_HTTP_CONNECTCODE.3
+man/man3/CURLINFO_HTTP_VERSION.3
 man/man3/CURLINFO_LASTSOCKET.3
 man/man3/CURLINFO_LOCAL_IP.3
 man/man3/CURLINFO_LOCAL_PORT.3
diff --git a/www/curl/distinfo b/www/curl/distinfo
index c066a20c866..bb95b7bb992 100644
--- a/www/curl/distinfo
+++ b/www/curl/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.119 2016/05/30 11:42:19 jklos Exp $
+$NetBSD: distinfo,v 1.119.2.1 2016/08/10 17:06:46 bsiegert Exp $
 
-SHA1 (curl-7.49.1.tar.bz2) = 50db69ee612d36a465e2fec3a35028e11c2766bb
-RMD160 (curl-7.49.1.tar.bz2) = 9dd8e02043ad67ecd3e342b0cacebe9c88b21d32
-SHA512 (curl-7.49.1.tar.bz2) = 665ef178c282c14f429498547b3711ef79faf85f6db7f4ec24259e2c6247f6ee234dda158ebc207d03f08b5198c5844480e054f24f054b2de6c6a15d4f1ce6e6
-Size (curl-7.49.1.tar.bz2) = 7459866 bytes
+SHA1 (curl-7.50.1.tar.bz2) = 6d9e54a7f8f5aa1f6cac652df93bb7163565b554
+RMD160 (curl-7.50.1.tar.bz2) = 9f450b5572bd99a8472abb639edd0a579c330705
+SHA512 (curl-7.50.1.tar.bz2) = 94acd91fcf8ff2605e1ba2d086c2c366257b61eaf516b9ea44e574e315feb5b30f6e47d89051f259e026ef5dd9edde5f7b15a6af9ee6a38f641da354e1e677b1
+Size (curl-7.50.1.tar.bz2) = 7464809 bytes
 SHA1 (patch-aa) = 793701d5ecc3343170fb437906c9adb74763cd13
 SHA1 (patch-curl-config.in) = d0cc7bb6a5bf0b9257f40dcffce7093cc0098eb7
 SHA1 (patch-lib_hostcheck.c) = 8e772d3f91cdafae17281cc19004269ece0cf308