Thanks, applied as 122c96122baa4917e78373d256549ca87887d4dc.

Michael

[sent from post-receive hook]

On Thu, 12 Jun 2025 21:32:01 +0200, Christian Melki 
<[email protected]> wrote:
> Mostly bugfixes.
> https://curl.se/changes.html#8_14_0
> 
> Plugs CVEs:
> CVE-2025-5025: No QUIC certificate pinning with wolfSSL
> CVE-2025-4947: QUIC certificate check skip with wolfSSL
> 
> Signed-off-by: Christian Melki <[email protected]>
> Message-Id: <[email protected]>
> Signed-off-by: Michael Olbrich <[email protected]>
> 
> diff --git a/rules/libcurl.make b/rules/libcurl.make
> index 8540cfdbd15a..964ec80efaf0 100644
> --- a/rules/libcurl.make
> +++ b/rules/libcurl.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl
>  #
>  # Paths and names
>  #
> -LIBCURL_VERSION      := 8.13.0
> -LIBCURL_MD5  := b94f85cf7c03fcc31b3750e45a424f26
> +LIBCURL_VERSION      := 8.14.0
> +LIBCURL_MD5  := 34a7f339efbb60bf872022ac8bdfe2b1
>  LIBCURL              := curl-$(LIBCURL_VERSION)
>  LIBCURL_SUFFIX       := tar.xz
>  LIBCURL_URL  := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX)

Reply via email to