gnu: curl: Update to 8.3.0.

According to upstream, the current version has 19 security issues.
See also <https://curl.se/docs/vuln-7.85.0.html>.

* gnu/packages/curl.scm (curl/fixed): New variable.
(curl): Use it as replacement.
This commit is contained in:
Liliana Marie Prikler 2023-10-05 08:11:34 +02:00
parent a31725ff90
commit 759b55712e
No known key found for this signature in database
GPG key ID: 442A84B8C70E2F87

View file

@ -65,6 +65,7 @@ (define-public curl
(package
(name "curl")
(version "7.85.0")
(replacement curl/fixed)
(source (origin
(method url-fetch)
(uri (string-append "https://curl.se/download/curl-"
@ -154,6 +155,20 @@ (define-public curl
"See COPYING in the distribution."))
(home-page "https://curl.haxx.se/")))
(define curl/fixed
(let ((%version "8.3.0"))
(package
(inherit curl)
(version "8.3.0a") ; add lowercase 'a' for grafting
(source (origin
(method url-fetch)
(uri (string-append "https://curl.se/download/curl-"
%version ".tar.xz"))
(sha256
(base32
"0qza6yf20y2l4aaxkn8dfw8p3fls1mxljvdb0m8z1i6ncxvn4v9p"))
(patches (search-patches "curl-use-ssl-cert-env.patch")))))))
(define-public curl-ssh
(package/inherit curl
(arguments