[Buildroot] [git commit branch/next] package/libcurl: security bump to version 8.11.1
Julien Olivain
ju.o at free.fr
Fri Feb 28 16:31:20 UTC 2025
commit: https://git.buildroot.net/buildroot/commit/?id=4338deaae58a68e397c7375476745778eb7b732f
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/next
Fixes the following security vulnerability:
CVE-2024-11053: netrc and redirect credential leak
https://curl.se/docs/CVE-2024-11053.html
Changelog: https://curl.se/ch/8.11.1.html
Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
Signed-off-by: Julien Olivain <ju.o at free.fr>
---
package/libcurl/libcurl.hash | 4 ++--
package/libcurl/libcurl.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash
index 93a0f85dee..c2ddee2cc2 100644
--- a/package/libcurl/libcurl.hash
+++ b/package/libcurl/libcurl.hash
@@ -1,5 +1,5 @@
# Locally calculated after checking pgp signature
-# https://curl.se/download/curl-8.11.0.tar.xz.asc
+# https://curl.se/download/curl-8.11.1.tar.xz.asc
# signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
-sha256 db59cf0d671ca6e7f5c2c5ec177084a33a79e04c97e71cf183a5cdea235054eb curl-8.11.0.tar.xz
+sha256 c7ca7db48b0909743eaef34250da02c19bc61d4f1dcedd6603f109409536ab56 curl-8.11.1.tar.xz
sha256 adb1fc06547fd136244179809f7b7c2d2ae6c4534f160aa513af9b6a12866a32 COPYING
diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk
index 1022abac85..845bf43418 100644
--- a/package/libcurl/libcurl.mk
+++ b/package/libcurl/libcurl.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBCURL_VERSION = 8.11.0
+LIBCURL_VERSION = 8.11.1
LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz
LIBCURL_SITE = https://curl.se/download
LIBCURL_DEPENDENCIES = host-pkgconf \
More information about the buildroot
mailing list