From aea7e25061cec63e6d284cc7e3eea3df19346a04 Mon Sep 17 00:00:00 2001 From: Michal Hrusecky Date: Wed, 11 Oct 2023 08:18:45 +0200 Subject: [PATCH] curl: Update to version 8.4.0 For detailed changes, see https://curl.se/changes.html#8_4_0 Switching to tar.bz2 for the time being as tar.xz is not yet available. Fixes CVE-2023-38546 and CVE-2023-38545. Signed-off-by: Michal Hrusecky --- package/network/utils/curl/Makefile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package/network/utils/curl/Makefile b/package/network/utils/curl/Makefile index 2d838381e..e814ce95b 100644 --- a/package/network/utils/curl/Makefile +++ b/package/network/utils/curl/Makefile @@ -9,15 +9,15 @@ include $(TOPDIR)/rules.mk include $(INCLUDE_DIR)/nls.mk PKG_NAME:=curl -PKG_VERSION:=8.3.0 +PKG_VERSION:=8.4.0 PKG_RELEASE:=1 -PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz +PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE_URL:=https://github.com/curl/curl/releases/download/curl-$(subst .,_,$(PKG_VERSION))/ \ https://dl.uxnr.de/mirror/curl/ \ https://curl.askapache.com/download/ \ https://curl.se/download/ -PKG_HASH:=376d627767d6c4f05105ab6d497b0d9aba7111770dd9d995225478209c37ea63 +PKG_HASH:=e5250581a9c032b1b6ed3cf2f9c114c811fc41881069e9892d115cc73f9e88c6 PKG_LICENSE:=MIT PKG_LICENSE_FILES:=COPYING