[PR PATCH] curl: update to 7.87

[PR PATCH] curl: update to 7.87

[dkwo]

[-- Attachment #1: Type: text/plain, Size: 406 bytes --]

There is a new pull request by dkwo against master on the void-packages repository

https://github.com/dkwo/void-packages curl
https://github.com/void-linux/void-packages/pull/41340

curl: update to 7.87
- I tested the changes in this PR: **NO**
- I built this PR locally for my native architecture, (x86_64-musl)

A patch file from https://github.com/void-linux/void-packages/pull/41340.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-curl-41340.patch --]
[-- Type: text/x-diff, Size: 1098 bytes --]

From 580827f0ce214e54033d724c8dfdb609cd0a4dfe Mon Sep 17 00:00:00 2001
From: dkwo <nicolopiazzalunga@gmail.com>
Date: Thu, 29 Dec 2022 09:12:04 +0100
Subject: [PATCH] curl: update to 7.87

---
 srcpkgs/curl/template | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/srcpkgs/curl/template b/srcpkgs/curl/template
index 0e3de89c3b37..7cc48f15e7ab 100644
--- a/srcpkgs/curl/template
+++ b/srcpkgs/curl/template
@@ -1,6 +1,6 @@
 # Template file for 'curl'
 pkgname=curl
-version=7.86.0
+version=7.87.0
 revision=1
 build_style=gnu-configure
 configure_args="ac_cv_sizeof_off_t=8 --enable-threaded-resolver --enable-ipv6
@@ -25,7 +25,7 @@ license="MIT"
 homepage="https://curl.haxx.se"
 changelog="https://curl.haxx.se/changes.html#${version//./_}"
 distfiles="${homepage}/download/${pkgname}-${version}.tar.bz2"
-checksum=f5ca69db03eea17fa8705bdfb1a9f58d76a46c9010518109bb38f313137e0a28
+checksum=5d6e128761b7110946d1276aff6f0f266f2b726f5e619f7e0a057a474155f307
 build_options="gnutls gssapi ldap rtmp ssh ssl zstd"
 build_options_default="ssh ssl zstd"
 vopt_conflict ssl gnutls

Re: curl: update to 7.87

[dkwo]

[-- Attachment #1: Type: text/plain, Size: 230 bytes --]

New comment by dkwo on void-packages repository

https://github.com/void-linux/void-packages/pull/41340#issuecomment-1367153242

Comment:
CVE-2022-43552: HTTP Proxy deny use-after-free
CVE-2022-43551: Another HSTS bypass via IDN

Re: [PR PATCH] [Closed]: curl: update to 7.87

[sgn]

[-- Attachment #1: Type: text/plain, Size: 264 bytes --]

There's a closed pull request on the void-packages repository

curl: update to 7.87
https://github.com/void-linux/void-packages/pull/41340

Description:
- I tested the changes in this PR: **NO**
- I built this PR locally for my native architecture, (x86_64-musl)