curl-7.29.0-35.el7

curl is a command line tool for transferring data with URL syntax, supporting
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,
SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP
uploading, HTTP form based upload, proxies, cookies, user password
authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer
resume, proxy tunneling and a busload of other useful tricks.

Security issues fixed with this release:

CVE-2016-5419
curl and libcurl before 7.50.1 do not prevent TLS session resumption
when the client certificate has changed, which allows remote attackers
to bypass intended restrictions by resuming a session.
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate
when choosing the TLS connection to reuse, which might allow remote
attackers to hijack the authentication of the connection by leveraging
a previously created connection with a different client certificate.
CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the
libnsspem.so library is available at runtime, allow remote attackers
to hijack the authentication of a TLS connection by leveraging reuse
of a previously loaded client certificate from file for a connection
for which no certificate has been set, a different vulnerability than
CVE-2016-5420.

Additional Changes: