From 460cce92473dfa4dbaad3a05f7286554f1d8cca7 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Sat, 14 Dec 2024 14:58:35 +0100 Subject: [PATCH] package/libcurl: security bump to version 8.11.1 Fixes the following security vulnerability: CVE-2024-11053: netrc and redirect credential leak https://curl.se/docs/CVE-2024-11053.html Changelog: https://curl.se/ch/8.11.1.html Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain (cherry picked from commit 4338deaae58a68e397c7375476745778eb7b732f) Signed-off-by: Peter Korsgaard --- package/libcurl/libcurl.hash | 4 ++-- package/libcurl/libcurl.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash index 93a0f85dee..c2ddee2cc2 100644 --- a/package/libcurl/libcurl.hash +++ b/package/libcurl/libcurl.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -# https://curl.se/download/curl-8.11.0.tar.xz.asc +# https://curl.se/download/curl-8.11.1.tar.xz.asc # signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 -sha256 db59cf0d671ca6e7f5c2c5ec177084a33a79e04c97e71cf183a5cdea235054eb curl-8.11.0.tar.xz +sha256 c7ca7db48b0909743eaef34250da02c19bc61d4f1dcedd6603f109409536ab56 curl-8.11.1.tar.xz sha256 adb1fc06547fd136244179809f7b7c2d2ae6c4534f160aa513af9b6a12866a32 COPYING diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 1022abac85..845bf43418 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCURL_VERSION = 8.11.0 +LIBCURL_VERSION = 8.11.1 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz LIBCURL_SITE = https://curl.se/download LIBCURL_DEPENDENCIES = host-pkgconf \