CVE-2019-5481.patch

From 8c08884007a48b467c5f383a4d699eb09997d82b Mon Sep 17 00:00:00 2001
From: Clayne Robison <Clayne.B.Robison@intel.com>
Date: Fri, 4 Oct 2019 21:01:19 -0700
Subject: [PATCH] [Intel Mkl] Upgrade curl to fix CVE-2019-5481 and
 CVE-2019-5482

---
 tensorflow/workspace.bzl | 8 ++++----
 third_party/curl.BUILD   | 1 +
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/tensorflow/workspace.bzl b/tensorflow/workspace.bzl
index 2b7d4110f417..a9b6f1719b68 100755
--- a/tensorflow/workspace.bzl
+++ b/tensorflow/workspace.bzl
@@ -502,12 +502,12 @@ def tf_repositories(path_prefix = "", tf_repo_name = ""):
     tf_http_archive(
         name = "curl",
         build_file = clean_dep("//third_party:curl.BUILD"),
-        sha256 = "4376ac72b95572fb6c4fbffefb97c7ea0dd083e1974c0e44cd7e49396f454839",
-        strip_prefix = "curl-7.65.3",
+        sha256 = "d0393da38ac74ffac67313072d7fe75b1fa1010eb5987f63f349b024a36b7ffb",
+        strip_prefix = "curl-7.66.0",
         system_build_file = clean_dep("//third_party/systemlibs:curl.BUILD"),
         urls = [
-            "https://storage.googleapis.com/mirror.tensorflow.org/curl.haxx.se/download/curl-7.65.3.tar.gz",
-            "https://curl.haxx.se/download/curl-7.65.3.tar.gz",
+            "https://storage.googleapis.com/mirror.tensorflow.org/curl.haxx.se/download/curl-7.66.0.tar.gz",
+            "https://curl.haxx.se/download/curl-7.66.0.tar.gz",
         ],
     )
 
diff --git a/third_party/curl.BUILD b/third_party/curl.BUILD
index b99a35083339..c28dd1546162 100644
--- a/third_party/curl.BUILD
+++ b/third_party/curl.BUILD
@@ -158,6 +158,7 @@ cc_library(
         "lib/pop3.h",
         "lib/progress.c",
         "lib/progress.h",
+        "lib/quic.h",
         "lib/rand.c",
         "lib/rand.h",
         "lib/rtsp.c",