curl: 8.9.1 -> 8.10.0

Fixes CVE-2024-8096. https://curl.se/docs/CVE-2024-8096.html Changes: https://curl.se/ch/8.10.0.html
NixOS · Sep 11, 2024 · 559bfa4 · 559bfa4
1 parent d1d2419
commit 559bfa4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 40 deletions.
diff --git a/pkgs/tools/networking/curl/default.nix b/pkgs/tools/networking/curl/default.nix
@@ -49,22 +49,16 @@ assert !((lib.count (x: x) [ gnutlsSupport opensslSupport wolfsslSupport rustlsS
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "curl";
-  version = "8.9.1";
+  version = "8.10.0";
 
   src = fetchurl {
     urls = [
       "https://curl.haxx.se/download/curl-${finalAttrs.version}.tar.xz"
       "https://github.com/curl/curl/releases/download/curl-${builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version}/curl-${finalAttrs.version}.tar.xz"
     ];
-    hash = "sha256-8pL2zAUdW7q/cl74XUMt/qzIcR3XF+qXYSrlkGQ4AeU=";
+    hash = "sha256-5rFC8OhelUdZ034mo2J+IngTdZW+gOOoYMQ1PkM15aA=";
   };
 
-  patches = [
-    # fixes https://github.com/curl/curl/issues/14344
-    # https://github.com/curl/curl/pull/14390
-    ./fix-sigpipe-leak.patch
-  ];
-
   # this could be accomplished by updateAutotoolsGnuConfigScriptsHook, but that causes infinite recursion
   # necessary for FreeBSD code path in configure
   postPatch = ''

diff --git a/pkgs/tools/networking/curl/fix-sigpipe-leak.patch b/pkgs/tools/networking/curl/fix-sigpipe-leak.patch