Pullup ticket #4560 - requested by he

www/curl: security update

Revisions pulled up:
- www/curl/Makefile                                             1.143
- www/curl/PLIST                                                1.45
- www/curl/distinfo                                             1.99

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Fri Nov  7 14:10:16 UTC 2014

   Modified Files:
   	pkgsrc/www/curl: Makefile PLIST distinfo

   Log Message:
   Changes 7.39.0:
   * SSLv3 is disabled by default
   * CURLOPT_COOKIELIST: Added "RELOAD" command [5]
   * build: Added WinIDN build configuration options to Visual Studio projects
   * ssh: improve key file search
   * SSL: public key pinning. Use CURLOPT_PINNEDPUBLICKEY and --pinnedpubkey
   * vtls: remove QsoSSL support, use gskit!
   * mk-ca-bundle: added SHA-384 signature algorithm
   * docs: added many examples for libcurl opts and other doc improvements
   * build: Added VC ssh2 target to main Makefile
   * MinGW: Added support to build with nghttp2
   * NetWare: Added support to build with nghttp2
   * build: added Watcom support to build with WinSSL
   * build: Added optional specific version generation of VC project files

   Bugfixes:
   * curl_easy_duphandle: CURLOPT_COPYPOSTFIELDS read out of bounds [9]
   * openssl: build fix for versions < 0.9.8e [1]
   * newlines: fix mixed newlines to LF-only [2]
   * ntlm: Fixed HTTP proxy authentication when using Windows SSPI [3]
   * sasl_sspi: Fixed Unicode build [4]
   * file: reject paths using embedded %00
   * threaded-resolver: revert Curl_expire_latest() switch [6]
   * configure: allow --with-ca-path with PolarSSL too
   * HTTP/2: Fix busy loop when EOF is encountered
   * CURLOPT_CAPATH: return failure if set without backend support
   * nss: do not fail if a CRL is already cached
   * smtp: Fixed intermittent "SSL3_WRITE_PENDING: bad write retry" error
   * fixed 20+ nits/memory leaks identified by Coverity scans
   * curl_schannel.c: Fixed possible memory or handle leak
   * multi-uv.c: call curl_multi_info_read() better
   * Cmake: Check for OpenSSL before OpenLDAP
   * Cmake: Fix library list provided to cURL tests
   * Cmake: Avoid cycle directory dependencies
   * Cmake: Build with GSS-API libraries (MIT or Heimdal)
   * vtls: provide backend defines for internal source code
   * nss: fix a connection failure when FTPS handle is reused
   * tests/http_pipe.py: Python 3 support
   * cmake: build tool_hugehelp (ENABLE_MANUAL)
   * cmake: enable IPv6 by default if available
   * tests: move TESTCASES to Makefile.inc, add show for cmake
   * ntlm: Avoid unnecessary buffer allocation for SSPI based type-2 token
   * ntlm: Fixed empty/bad base-64 decoded buffer return codes
   * ntlm: Fixed empty type-2 decoded message info text
   * cmake: add CMake/Macros.cmake to the release tarball
   * cmake: add SUPPORT_FEATURES and SUPPORT_PROTOCOLS
   * cmake: use LIBCURL_VERSION from curlver.h
   * cmake: generate pkg-config and curl-config
   * fixed several superfluous variable assignements identified by cppcheck
   * cleanup of 'CURLcode result' return code
   * pipelining: only output "is not blacklisted" in debug builds
   * SSL: Remove SSLv3 from SSL default due to POODLE attack
   * gskit.c: remove SSLv3 from SSL default
   * darwinssl: detect possible future removal of SSLv3 from the framework
   * ntlm: Only define ntlm data structure when USE_NTLM is defined
   * ntlm: Return CURLcode from Curl_ntlm_core_mk_lm_hash()
   * ntlm: Return all errors from Curl_ntlm_core_mk_nt_hash()
   * sspi: Only call CompleteAuthToken() when complete is needed
   * http_negotiate: Fixed missing check for USE_SPNEGO
   * HTTP: return larger than 3 digit response codes too [7]
   * openssl: Check for NPN / ALPN via OpenSSL version number
   * openssl: enable NPN separately from ALPN
   * sasl_sspi: Allow DIGEST-MD5 to use current windows credentials
   * sspi: Return CURLE_LOGIN_DENIED on AcquireCredentialsHandle() failure
   * resume: consider a resume from [content-length] to be OK [8]
   * sasl: Fixed Kerberos V5 inclusion when CURL_DISABLE_CRYPTO_AUTH is used
   * build-openssl.bat: Fix x64 release build
   * cmake: drop _BSD_SOURCE macro usage
   * cmake: fix gethostby{addr,name}_r in CurlTests
   * cmake: clean OtherTests, fixing -Werror
   * cmake: fix struct sockaddr_storage check
   * Curl_single_getsock: fix hold/pause sock handling
   * SSL: PolarSSL default min SSL version TLS 1.0
   * cmake: fix ZLIB_INCLUDE_DIRS use [10]
   * buildconf: stop checking for libtool

3 files changed, 20 insertions, 7 deletions

diff --git a/www/curl/Makefile b/www/curl/Makefile
index 06c86fac85b..a466dc43bf4 100644
--- a/www/curl/Makefile
+++ b/www/curl/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.141 2014/09/14 16:43:44 wiz Exp $
+# $NetBSD: Makefile,v 1.141.2.1 2014/11/27 08:18:54 tron Exp $
 
-DISTNAME=	curl-7.38.0
+DISTNAME=	curl-7.39.0
 CATEGORIES=	www
 MASTER_SITES=	http://curl.haxx.se/download/ \
 		ftp://ftp.sunet.se/pub/www/utilities/curl/
diff --git a/www/curl/PLIST b/www/curl/PLIST
index 012b63d04e3..6a9f95b6d7d 100644
--- a/www/curl/PLIST
+++ b/www/curl/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.44 2014/07/22 11:38:26 wiz Exp $
+@comment $NetBSD: PLIST,v 1.44.2.1 2014/11/27 08:18:54 tron Exp $
 bin/curl
 bin/curl-config
 include/curl/curl.h
@@ -14,6 +14,19 @@ lib/libcurl.la
 lib/pkgconfig/libcurl.pc
 man/man1/curl-config.1
 man/man1/curl.1
+man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3
+man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3
+man/man3/CURLMOPT_MAXCONNECTS.3
+man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3
+man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3
+man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3
+man/man3/CURLMOPT_PIPELINING.3
+man/man3/CURLMOPT_PIPELINING_SERVER_BL.3
+man/man3/CURLMOPT_PIPELINING_SITE_BL.3
+man/man3/CURLMOPT_SOCKETDATA.3
+man/man3/CURLMOPT_SOCKETFUNCTION.3
+man/man3/CURLMOPT_TIMERDATA.3
+man/man3/CURLMOPT_TIMERFUNCTION.3
 man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3
 man/man3/CURLOPT_ACCEPT_ENCODING.3
 man/man3/CURLOPT_ADDRESS_SCOPE.3
diff --git a/www/curl/distinfo b/www/curl/distinfo
index 3d33f58b05e..63728f2e5fd 100644
--- a/www/curl/distinfo
+++ b/www/curl/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.98 2014/09/14 16:43:44 wiz Exp $
+$NetBSD: distinfo,v 1.98.2.1 2014/11/27 08:18:54 tron Exp $
 
-SHA1 (curl-7.38.0.tar.bz2) = 59c027807fdb33ebf248cb3cc006e7cbe2d655ea
-RMD160 (curl-7.38.0.tar.bz2) = 3095b4132b9b75e8146c34dab207a4e91ba10431
-Size (curl-7.38.0.tar.bz2) = 3159331 bytes
+SHA1 (curl-7.39.0.tar.bz2) = 80c6eadcc6ca526d1e1862c2234f33c7b7d10950
+RMD160 (curl-7.39.0.tar.bz2) = 9a568334b9854e98fdf717099da85c0926ae8a9f
+Size (curl-7.39.0.tar.bz2) = 3241619 bytes
 SHA1 (patch-aa) = 54c9f5b1a22743e2714883ae5a2b20366b839e7e
 SHA1 (patch-curl-config.in) = fd87c97b601a6b9269f67fbc066604ee7e22570e
 SHA1 (patch-lib_hostcheck.c) = 9faf94f44703c7d37377fd3af319ca5c27df34c2