From f6d2c6a13168d3ad516d73b9d97315878f4a9b36 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Thu, 18 May 2023 02:43:50 +0200 Subject: [PATCH] curl: 8.0.1 -> 8.1.1 https://daniel.haxx.se/blog/2023/05/17/curl-8-1-0-http2-over-proxy/ https://curl.se/changes.html#8_1_0 https://curl.se/changes.html#8_1_1 https://www.openwall.com/lists/oss-security/2023/05/17/1 https://www.openwall.com/lists/oss-security/2023/05/17/2 https://www.openwall.com/lists/oss-security/2023/05/17/3 https://www.openwall.com/lists/oss-security/2023/05/17/4 Fixes: CVE-2023-28319, CVE-2023-28320, CVE-2023-28321, CVE-2023-28322 --- pkgs/tools/networking/curl/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/networking/curl/default.nix b/pkgs/tools/networking/curl/default.nix index 9bdf18c44fc68..5ff2aef0b8339 100644 --- a/pkgs/tools/networking/curl/default.nix +++ b/pkgs/tools/networking/curl/default.nix @@ -47,14 +47,14 @@ assert !((lib.count (x: x) [ gnutlsSupport opensslSupport wolfsslSupport rustlsS stdenv.mkDerivation (finalAttrs: { pname = "curl"; - version = "8.0.1"; + version = "8.1.1"; src = fetchurl { urls = [ "https://curl.haxx.se/download/curl-${finalAttrs.version}.tar.bz2" "https://github.com/curl/curl/releases/download/curl-${finalAttrs.version}/curl-${finalAttrs.version}.tar.bz2" ]; - hash = "sha256-m2selrdI0EuWh4a2vfQHqlx1q1Oj03wcjIHNtzZVXM8="; + hash = "sha256-UdKvcieZE7XUyrH+Hzi5RM9wkEyIvuJGtb1XWETnA1o="; }; patches = [