Thanks, applied as 0864a6b4e634f71531c21001bd9e61fa83a854c3.

Michael

[sent from post-receive hook]

On Fri, 02 Jun 2023 09:17:45 +0200, Christian Melki 
<christian.me...@t2data.com> wrote:
> A slew of changes, mostly bugfixes.
> https://curl.se/changes.html#8_1_0
> https://curl.se/changes.html#8_1_1
> 
> Including plugging four CVE:s.
> https://curl.se/docs/vuln-8.0.1.html
> CVE-2023-28319 - UAF in SSH sha256 fingerprint check
> CVE-2023-28320 - siglongjmp race condition
> CVE-2023-28321 - IDN wildcard match
> CVE-2023-28322 - more POST-after-PUT confusion
> 
> Signed-off-by: Christian Melki <christian.me...@t2data.com>
> Message-Id: <20230526042927.1858867-1-christian.me...@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbr...@pengutronix.de>
> 
> diff --git a/rules/libcurl.make b/rules/libcurl.make
> index 76dc732b5770..0216a9e231c3 100644
> --- a/rules/libcurl.make
> +++ b/rules/libcurl.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl
>  #
>  # Paths and names
>  #
> -LIBCURL_VERSION      := 8.0.1
> -LIBCURL_MD5  := f6c2fdeb30ad30234378a56c28350845
> +LIBCURL_VERSION      := 8.1.1
> +LIBCURL_MD5  := 624f8f7eb4b4699c5e69f081c17c7049
>  LIBCURL              := curl-$(LIBCURL_VERSION)
>  LIBCURL_SUFFIX       := tar.xz
>  LIBCURL_URL  := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX)

Reply via email to