Subject: [alpine-aports] [PATCH] main/curl: upgrade to 7.57.0 (CVE-2017-8816, CVE-2017-8817, CVE-2017-8818)

From: Daniel Sabogal <[email-masked]>
Date: Wed, 29 Nov 2017 19:27:20 -0500

---
 main/curl/APKBUILD | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/main/curl/APKBUILD b/main/curl/APKBUILD
index 1594b1979d..4c35f5f856 100644
--- a/main/curl/APKBUILD
+++ b/main/curl/APKBUILD
@@ -3,8 +3,8 @@
 # Contributor: Łukasz Jendrysik <[email-masked]>
 # Maintainer: Natanael Copa <[email-masked]>
 pkgname=curl
-pkgver=7.56.1
-pkgrel=1
+pkgver=7.57.0
+pkgrel=0
 pkgdesc="An URL retrival utility and library"
 url="http://curl.haxx.se"
 arch="all"
@@ -16,6 +16,10 @@ source="http://curl.haxx.se/download/$pkgname-$pkgver.tar.bz2
 subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev libcurl"
 
 # secfixes:
+#   7.57.0-r0:
+#     - CVE-2017-8816
+#     - CVE-2017-8817
+#     - CVE-2017-8818
 #   7.56.1-r0:
 #     - CVE-2017-1000257
 #   7.55.0-r0:
@@ -88,4 +92,4 @@ libcurl() {
 	mv "$pkgdir"/usr/lib "$subpkgdir"/usr
 }
 
-sha512sums="f8a602e6890b2791ea9199c80801ffd027980de3733d4ab001ee80b5167f840cc821c6fe7852087c88a471edc9d3f328cf660af3e2c6f7139d6c8de62b0ade68  curl-7.56.1.tar.bz2"
+sha512sums="f366d2e931d7aff63bac0e1f760ced32c849252947d522427ba92124566906a7e6bd081b6d1630df36895dda2a00ac4cf1bed1470740693ef47ab90c6a270377  curl-7.57.0.tar.bz2"
-- 
2.15.0

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---

---

From: Daniel Sabogal <[email-masked]>
Date: Wed, 29 Nov 2017 19:27:21 -0500

---
 main/libinput/APKBUILD | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/main/libinput/APKBUILD b/main/libinput/APKBUILD
index 6e34f49dcd..cf11f31b95 100644
--- a/main/libinput/APKBUILD
+++ b/main/libinput/APKBUILD
@@ -1,7 +1,7 @@
 # Contributor: Sören Tempel <[email-masked]>
 # Maintainer: Daniel Sabogal <[email-masked]>
 pkgname=libinput
-pkgver=1.9.2
+pkgver=1.9.3
 pkgrel=0
 pkgdesc="Library for handling input devices"
 url="http://www.freedesktop.org/wiki/Software/libinput/"
@@ -29,4 +29,4 @@ package() {
 	DESTDIR="$pkgdir" ninja -C builddir/ install
 }
 
-sha512sums="99719ab26be8ed35937ce91307459fa8c4aa7c383a555f1012a058ba98ca1d1c5df0d9b5e6a45046341c6dbae496dc29512b487ac7873b6ec67cab1176ee04ac  libinput-1.9.2.tar.xz"
+sha512sums="33fb17724d4c2992bf31f9bb2e0825955468058e122ad420678b01ee293e1651d659fbae8873a7913f571243b3618032774cd350d2513eb73320d40aaa9953d1  libinput-1.9.3.tar.xz"
-- 
2.15.0

---