Skip to content

Commit c975071

Browse files
Updates curl to 8.14.1 and addresses CVEs
Bumps curl to version 8.14.1-r1. This update includes fixes for the following CVEs: - CVE-2025-5399 - CVE-2025-5025 - CVE-2025-4947 Also includes a change to the certificate path. Provides wcurl and replaces wcurl Includes a `dev` function to install trurl scripts.
1 parent b63d1fe commit c975071

File tree

1 file changed

+19
-5
lines changed

1 file changed

+19
-5
lines changed

CURL_APKBUILD

Lines changed: 19 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
# Contributor: Sergei Lukin <[email protected]>
22
# Contributor: Valery Kartel <[email protected]>
33
# Contributor: Łukasz Jendrysik <[email protected]>
4-
# Maintainer: Natanael Copa <[email protected]>
54

65
# RESTRICTED: Do NOT enable the rustls or hyper backends, as they depend on Rust
76
# and Rust is not yet available on all architectures. Any commit which changes
87
# this aport from arch=all WILL be reverted.
98

9+
maintainer="fossdd <[email protected]>"
1010
pkgname=curl
11-
pkgver=8.12.1
12-
pkgrel=0
11+
pkgver=8.14.1
12+
pkgrel=1
1313
pkgdesc="URL retrival utility and library"
1414
url="https://curl.se/"
1515
arch="all"
@@ -37,8 +37,15 @@ options="net" # Required for running tests
3737
if [ -n "$BOOTSTRAP" ] || [ -n "$APORTS_BOOTSTRAP" ]; then
3838
options="$options !check" # remove python3 dependency
3939
fi
40+
provides="wcurl=$pkgver-r$pkgrel"
41+
replaces="wcurl"
4042

4143
# secfixes:
44+
# 8.14.1-r0:
45+
# - CVE-2025-5399
46+
# 8.14.0-r0:
47+
# - CVE-2025-5025
48+
# - CVE-2025-4947
4249
# 8.12.0-r0:
4350
# - CVE-2025-0167
4451
# - CVE-2025-0665
@@ -217,7 +224,8 @@ build() {
217224
--with-libidn2 \
218225
--with-nghttp2 \
219226
--with-openssl \
220-
--with-ca-bundle=/etc/ssl/cert.pem \
227+
--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
228+
--with-ca-path=/etc/ssl/certs \
221229
--with-zsh-functions-dir \
222230
--disable-ldap \
223231
--with-pic \
@@ -253,6 +261,12 @@ libcurl() {
253261
amove usr/lib
254262
}
255263

264+
dev() {
265+
default_dev
266+
# Used by trurl
267+
install -Dm755 -t "$subpkgdir"/usr/bin "$builddir"/scripts/cd2nroff
268+
}
269+
256270
sha512sums="
257-
88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603 curl-8.12.1.tar.xz
271+
7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9 curl-8.14.1.tar.xz
258272
"

0 commit comments

Comments
 (0)