This is an automated email from the ASF dual-hosted git repository.
gehafearless pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-pegasus.git
The following commit(s) were added to refs/heads/master by this push:
new 6064d7085 build(thirdparty): bump libcurl from 7.47.0 to 8.4.0 (#1633)
6064d7085 is described below
commit 6064d7085f47fed4ca7d5bce0610153974d0092f
Author: Dan Wang <[email protected]>
AuthorDate: Thu Oct 12 11:14:53 2023 +0800
build(thirdparty): bump libcurl from 7.47.0 to 8.4.0 (#1633)
#1604
In pegasus, both prometheus-cpp
and http client are
based on libcurl.
Above all, an important version 8.4.0 for libcurl, which has fixed severity
HIGH
security problem(curl/curl#12026), would be
released in Oct 11.
Therefore, we should bump libcurl from 7.47.0 to 8.4.0
---
thirdparty/CMakeLists.txt | 15 +++++++++------
1 file changed, 9 insertions(+), 6 deletions(-)
diff --git a/thirdparty/CMakeLists.txt b/thirdparty/CMakeLists.txt
index f6fd11d4b..f005f321a 100644
--- a/thirdparty/CMakeLists.txt
+++ b/thirdparty/CMakeLists.txt
@@ -297,17 +297,20 @@ set(CURL_OPTIONS
--without-libssh2
--without-ssl
--without-libidn
+ --without-zstd
)
if (APPLE)
set(CURL_OPTIONS
- ${CURL_OPTIONS}
- --without-nghttp2
- )
+ ${CURL_OPTIONS}
+ --without-nghttp2
+ --without-libidn2
+ --without-brotli
+ )
endif ()
ExternalProject_Add(curl
- URL ${OSS_URL_PREFIX}/curl-7.47.0.tar.gz
- http://curl.haxx.se/download/curl-7.47.0.tar.gz
- URL_MD5 5109d1232d208dfd712c0272b8360393
+ URL ${OSS_URL_PREFIX}/curl-8.4.0.tar.gz
+ http://curl.haxx.se/download/curl-8.4.0.tar.gz
+ URL_MD5 533e8a3b1228d5945a6a512537bea4c7
CONFIGURE_COMMAND ./configure --prefix=${TP_OUTPUT}
${CURL_OPTIONS}
BUILD_IN_SOURCE 1
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
