From fb5fb06ee5a886df5036c5c5e6c4536f2bc8e1c1 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 11 Sep 2025 19:13:33 +0200 Subject: [PATCH] package/libcurl: security bump version to 8.16.0 Changelog: https://curl.se/ch/8.16.0.html Fixed CVEs: CVE-2025-9086: https://curl.se/docs/CVE-2025-9086.html CVE-2025-10148: https://curl.se/docs/CVE-2025-10148.html Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard --- package/libcurl/libcurl.hash | 4 ++-- package/libcurl/libcurl.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libcurl/libcurl.hash b/package/libcurl/libcurl.hash index 2e36917382..4cc4da4f26 100644 --- a/package/libcurl/libcurl.hash +++ b/package/libcurl/libcurl.hash @@ -1,5 +1,5 @@ # Locally calculated after checking pgp signature -# https://curl.se/download/curl-8.15.0.tar.xz.asc +# https://curl.se/download/curl-8.16.0.tar.xz.asc # signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 -sha256 6cd0a8a5b126ddfda61c94dc2c3fc53481ba7a35461cf7c5ab66aa9d6775b609 curl-8.15.0.tar.xz +sha256 40c8cddbcb6cc6251c03dea423a472a6cea4037be654ba5cf5dec6eb2d22ff1d curl-8.16.0.tar.xz sha256 e18f1989333b70044b2adfb7dc2f905d0119dbdcac3bc9f4bc9d540e3a29de5b COPYING diff --git a/package/libcurl/libcurl.mk b/package/libcurl/libcurl.mk index 1cfdda27d2..0aa88044bd 100644 --- a/package/libcurl/libcurl.mk +++ b/package/libcurl/libcurl.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBCURL_VERSION = 8.15.0 +LIBCURL_VERSION = 8.16.0 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz LIBCURL_SITE = https://curl.se/download LIBCURL_DEPENDENCIES = host-pkgconf \