From 0a92e971968191a7e209015721a5f44c38f5acaf Mon Sep 17 00:00:00 2001 From: Peter Seiderer Date: Wed, 22 Mar 2023 17:24:45 +0100 Subject: [PATCH] package/libcurl: security bump version to 8.0.1 For details see [1] and [2]. [1] https://curl.se/changes.html#8_0_0 [1] https://curl.se/changes.html#8_0_1 Fixes the following security issues: CVE-2023-27533: https://curl.se/docs/CVE-2023-27533.html CVE-2023-27534: https://curl.se/docs/CVE-2023-27534.html CVE-2023-27535: https://curl.se/docs/CVE-2023-27535.html CVE-2023-27536: https://curl.se/docs/CVE-2023-27536.html CVE-2023-27537: https://curl.se/docs/CVE-2023-27537.html CVE-2023-27538: https://curl.se/docs/CVE-2023-27538.html Signed-off-by: Peter Seiderer Signed-off-by: Yann E. MORIN (cherry picked from commit 1e735c48372a40c0c838baf4946022545ed531f1) [Peter: Mark as security bump] Signed-off-by: Peter Korsgaard --- package/libcurl/libcurl.hash | 4 ++-- package/libcurl/libcurl.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash index 32b3d0b5e2..8a29e7b977 100644 --- a/package/libcurl/libcurl.hash +++ b/package/libcurl/libcurl.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -# https://curl.se/download/curl-7.88.1.tar.xz.asc +# https://curl.se/download/curl-8.0.1.tar.xz.asc # signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 -sha256 1dae31b2a7c1fe269de99c0c31bb488346aab3459b5ffca909d6938249ae415f curl-7.88.1.tar.xz +sha256 0a381cd82f4d00a9a334438b8ca239afea5bfefcfa9a1025f2bf118e79e0b5f0 curl-8.0.1.tar.xz sha256 b1d7feb949ea5023552029fbe0bf5db4f23c2f85e9b8e51e18536f0ecbf9c524 COPYING diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index dd715c1bb6..a5313e686f 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCURL_VERSION = 7.88.1 +LIBCURL_VERSION = 8.0.1 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz LIBCURL_SITE = https://curl.se/download LIBCURL_DEPENDENCIES = host-pkgconf \