Browse code
curl : update to 7.58.0 to fix CVE-2017-8817
Change-Id: I2b357b9e42d452d24325db211f1aad1cebd50e64
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/4758
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Vinay Kulkarni <kulkarniv@vmware.com>
Reviewed-by: Anish Swaminathan <anishs@vmware.com>
xiaolin-vmware authored on 2018/02/09 03:05:38Showing 1 changed files
| ... | ... |
@@ -1,15 +1,14 @@ |
| 1 | 1 |
Summary: An URL retrieval utility and library |
| 2 | 2 |
Name: curl |
| 3 |
-Version: 7.56.1 |
|
| 4 |
-Release: 2%{?dist}
|
|
| 3 |
+Version: 7.58.0 |
|
| 4 |
+Release: 1%{?dist}
|
|
| 5 | 5 |
License: MIT |
| 6 | 6 |
URL: http://curl.haxx.se |
| 7 | 7 |
Group: System Environment/NetworkingLibraries |
| 8 | 8 |
Vendor: VMware, Inc. |
| 9 | 9 |
Distribution: Photon |
| 10 |
-Source0: http://curl.haxx.se/download/%{name}-%{version}.tar.xz
|
|
| 11 |
-%define sha1 curl=c26bd88fdd5fe5d31a3b9e7a0a6b3dffff3168df |
|
| 12 |
-Patch0: curl-CVE-2017-8818.patch |
|
| 10 |
+Source0: http://curl.haxx.se/download/%{name}-%{version}.tar.gz
|
|
| 11 |
+%define sha1 curl=089f17884d672aca7a661a65d847135f2f0ccbbf |
|
| 13 | 12 |
BuildRequires: ca-certificates |
| 14 | 13 |
BuildRequires: openssl-devel |
| 15 | 14 |
BuildRequires: krb5-devel |
| ... | ... |
@@ -42,7 +41,6 @@ This package contains minimal set of shared curl libraries. |
| 42 | 42 |
|
| 43 | 43 |
%prep |
| 44 | 44 |
%setup -q |
| 45 |
-%patch0 -p1 |
|
| 46 | 45 |
%build |
| 47 | 46 |
./configure \ |
| 48 | 47 |
CFLAGS="%{optflags}" \
|
| ... | ... |
@@ -90,6 +88,8 @@ rm -rf %{buildroot}/*
|
| 90 | 90 |
%{_libdir}/libcurl.so.*
|
| 91 | 91 |
|
| 92 | 92 |
%changelog |
| 93 |
+* Thu Feb 08 2018 Xiaolin Li <xiaolinl@vmware.com> 7.58.0-1 |
|
| 94 |
+- Fix CVE-2017-8817. |
|
| 93 | 95 |
* Thu Dec 21 2017 Xiaolin Li <xiaolinl@vmware.com> 7.56.1-2 |
| 94 | 96 |
- Fix CVE-2017-8818. |
| 95 | 97 |
* Wed Dec 13 2017 Xiaolin Li <xiaolinl@vmware.com> 7.56.1-1 |