Bunch of fixes.
https://curl.se/changes.html#8_5_0

Plugs noncritical CVEs:
CVE-2023-46218: cookie mixed case PSL bypass
CVE-2023-46219: HSTS long file name clears contents

Signed-off-by: Christian Melki <christian.me...@t2data.com>
---
 rules/libcurl.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libcurl.make b/rules/libcurl.make
index 61797e9ae..f0c2a74f2 100644
--- a/rules/libcurl.make
+++ b/rules/libcurl.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl
 #
 # Paths and names
 #
-LIBCURL_VERSION        := 8.4.0
-LIBCURL_MD5    := 8424597f247da68b6041dd7f9ca367fe
+LIBCURL_VERSION        := 8.5.0
+LIBCURL_MD5    := 3e9e5c2db494e7dbd4e7024b149021c9
 LIBCURL                := curl-$(LIBCURL_VERSION)
 LIBCURL_SUFFIX := tar.xz
 LIBCURL_URL    := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX)
-- 
2.34.1


Reply via email to