From 452bfb9e86f282f561ec853fae9a94725b0da51f Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 22 Aug 2024 20:20:42 +0200 Subject: [PATCH] package/libcurl: security bump to version 8.9.1 Changelog: https://curl.se/changes.html#8_9_1 Fixes CVE-2024-7264. Signed-off-by: Bernd Kuhls Reviewed-by: Petr Vorel Signed-off-by: Thomas Petazzoni (cherry picked from commit e656625b8a68e15deb9afaeaa4d61de5171288a4) Signed-off-by: Peter Korsgaard --- package/libcurl/libcurl.hash | 4 ++-- package/libcurl/libcurl.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash index fa325efd7d..1d01935501 100644 --- a/package/libcurl/libcurl.hash +++ b/package/libcurl/libcurl.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -# https://curl.se/download/curl-8.9.0.tar.xz.asc +# https://curl.se/download/curl-8.9.1.tar.xz.asc # signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 -sha256 ff09b2791ca56d25fd5c3f3a4927dce7c8a9dc4182200c487ca889fba1fdd412 curl-8.9.0.tar.xz +sha256 f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5 curl-8.9.1.tar.xz sha256 adb1fc06547fd136244179809f7b7c2d2ae6c4534f160aa513af9b6a12866a32 COPYING diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 966885aeda..3661cbf5bd 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCURL_VERSION = 8.9.0 +LIBCURL_VERSION = 8.9.1 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz LIBCURL_SITE = https://curl.se/download LIBCURL_DEPENDENCIES = host-pkgconf \