Fixes CVE-2021-22947, CVE-2021-22946, CVE-2021-22945

Change tarball compression to xz instead of bz2.
Remove enable-symbol-hiding.
Rename get-easy-option to get-easy-options.
Remove without-metalink, deprecated.

Signed-off-by: Christian Melki <[email protected]>
---
 rules/libcurl.make | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/rules/libcurl.make b/rules/libcurl.make
index 2e68e51ea..a9059e9e3 100644
--- a/rules/libcurl.make
+++ b/rules/libcurl.make
@@ -15,10 +15,10 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl
 #
 # Paths and names
 #
-LIBCURL_VERSION        := 7.77.0
-LIBCURL_MD5    := 045d28029679dabb6b20a814934671ad
+LIBCURL_VERSION        := 7.80.0
+LIBCURL_MD5    := cf9f8553762150ef0ebcd5ee412737f5
 LIBCURL                := curl-$(LIBCURL_VERSION)
-LIBCURL_SUFFIX := tar.bz2
+LIBCURL_SUFFIX := tar.xz
 LIBCURL_URL    := https://curl.haxx.se/download/$(LIBCURL).$(LIBCURL_SUFFIX)
 LIBCURL_SOURCE := $(SRCDIR)/$(LIBCURL).$(LIBCURL_SUFFIX)
 LIBCURL_DIR    := $(BUILDDIR)/$(LIBCURL)
@@ -40,7 +40,6 @@ LIBCURL_CONF_OPT      := \
        --disable-werror \
        --disable-curldebug \
        --enable-symbol-hiding \
-       --enable-hidden-symbols \
        --$(call ptx/endis, PTXCONF_LIBCURL_C_ARES)-ares \
        --enable-rt \
        --disable-ech \
@@ -85,7 +84,7 @@ LIBCURL_CONF_OPT      := \
        --enable-netrc \
        --enable-progress-meter \
        --disable-dnsshuffle \
-       --enable-get-easy-option \
+       --enable-get-easy-options \
        --disable-alt-svc \
        --enable-hsts \
        --without-schannel \
@@ -110,7 +109,6 @@ LIBCURL_CONF_OPT    := \
        --without-ca-fallback \
        --without-libpsl \
        --without-libgsasl \
-       --without-libmetalink \
        --$(call ptx/wwo, PTXCONF_LIBCURL_LIBSSH2)-libssh2 \
        --without-libssh \
        --without-wolfssh \
-- 
2.30.2


_______________________________________________
ptxdist mailing list
[email protected]
To unsubscribe, send a mail with subject "unsubscribe" to 
[email protected]

Reply via email to