Update "curl" package to version 7.19.4. Changes since version 7.19.3:
Changes:
 - Added CURLOPT_NOPROXY and the corresponding --noproxy
 - the OpenSSL-specific code disables TICKET (rfc5077) which is enabled
   by default in openssl 0.9.8j
 - Added CURLOPT_TFTP_BLKSIZE
 - Added CURLOPT_SOCKS5_GSSAPI_SERVICE and CURLOPT_SOCKS5_GSSAPI_NEC -
   with the corresponding curl options --socks5-gssapi-service and
   --socks5-gssapi-nec
 - Improved IPv6 support when built with with c-ares >= 1.6.1
 - Added CURLPROXY_HTTP_1_0 and --proxy1.0
 - Added docs/libcurl/symbols-in-versions
 - Added CURLINFO_CONDITION_UNMET
 - Added support for Digest and NTLM authentication using GnuTLS
 - CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 to retry the CWD
   even when MKD fails
 - GnuTLS initing moved to curl_global_init()
 - Added CURLOPT_REDIR_PROTOCOLS and CURLOPT_PROTOCOLS
Bugfixes:
 - missing ssh.obj in VS makefiles
 - FTP ;type=i URLs now work with CURLOPT_PROXY_TRANSFER_MODE in
   Turkish locale
 - realms with quoted quotation marks in HTTP Digest headers
 - VC9 makefiles are now really included
 - multi interface memory leak with CURLMOPT_MAXCONNECTS set
 - CURLINFO_CONTENT_LENGTH_DOWNLOAD size from file:// "transfers" with
   CURLOPT_NOBODY set true
 - memory leak on some libz errors for content encodings
 - NSS-enabled build is repaired
 - superfluous wait in SFTP downloads removed
 - FTP with the multi interface no longer kills the control connection
   as easily on transfer failures
 - compilation halting when using VS2008 to build a Windows 2000 target
 - ease creation of libcurl Mac OS X Framework
 - CURLINFO_CONTENT_LENGTH_DOWNLOAD and CURLINFO_CONTENT_LENGTH_UPLOAD
   are -1 if unknown
 - Negotiate proxy authentication
 - CURLOPT_INTERFACE and CURLOPT_LOCALPORT used together

This update fixes the security problem reported in CVE-2009-0037.


(tron)