From 7024a0fb5b6f5050756ffa8b162d71b34dd1cc21 Mon Sep 17 00:00:00 2001
From: Celeste <20312-Celeste@users.gitlab.alpinelinux.org>
Date: Thu, 7 Dec 2023 01:51:01 +0000
Subject: [PATCH] main/curl: security upgrade to 8.5.0
- CVE-2023-46218
- CVE-2023-46219
---
main/curl/APKBUILD | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/main/curl/APKBUILD b/main/curl/APKBUILD
index 847d3019e0de..c29d11085f11 100644
--- a/main/curl/APKBUILD
+++ b/main/curl/APKBUILD
@@ -8,7 +8,7 @@
# this aport from arch=all WILL be reverted.
pkgname=curl
-pkgver=8.4.0
+pkgver=8.5.0
pkgrel=0
pkgdesc="URL retrival utility and library"
url="https://curl.se/"
@@ -35,6 +35,9 @@ options="net" # Required for running tests
[ -n "$BOOTSTRAP" ] && options="$options !check" # remove python3 dependency
# secfixes:
+# 8.5.0-r0:
+# - CVE-2023-46218
+# - CVE-2023-46219
# 8.4.0-r0:
# - CVE-2023-38545
# - CVE-2023-38546
@@ -224,5 +227,5 @@ libcurl() {
}
sha512sums="
-7027dbf3b759b39d6ec9c4da58fadd254e84bb93bff599541b3bc3135bad4c2955c6237d7ddd60973f9f1a6948bc32d7e312985fb50658bc958b9f22fee74f2b curl-8.4.0.tar.xz
+acffa2cf61d9b8e4188575a1b40227da8d722df2e5fe8bb82a222b4eb2fd64bf8aebd90852ce050c79fb5e517d5cee2546bf7de92ede1dd394263e231cb741a3 curl-8.5.0.tar.xz
"
--
GitLab