curl: Update to version 8.4.0

For detailed changes, see https://curl.se/changes.html#8_4_0 Switching to tar.bz2 for the time being as tar.xz is not yet available. Fixes CVE-2023-38546 and CVE-2023-38545. Signed-off-by: Michal Hrusecky <[email protected]>
HiGarfield · Oct 12, 2023 · aea7e25 · aea7e25
1 parent 5bf1a99
commit aea7e25
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/package/network/utils/curl/Makefile b/package/network/utils/curl/Makefile
@@ -9,15 +9,15 @@ include $(TOPDIR)/rules.mk
 include $(INCLUDE_DIR)/nls.mk
 
 PKG_NAME:=curl
-PKG_VERSION:=8.3.0
+PKG_VERSION:=8.4.0
 PKG_RELEASE:=1
 
-PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
 PKG_SOURCE_URL:=https://github.com/curl/curl/releases/download/curl-$(subst .,_,$(PKG_VERSION))/ \
 	https://dl.uxnr.de/mirror/curl/ \
 	https://curl.askapache.com/download/ \
 	https://curl.se/download/
-PKG_HASH:=376d627767d6c4f05105ab6d497b0d9aba7111770dd9d995225478209c37ea63
+PKG_HASH:=e5250581a9c032b1b6ed3cf2f9c114c811fc41881069e9892d115cc73f9e88c6
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=COPYING