Related: CVE-2021-22924 - bump release to pick gating.yaml

Ideally such commits and builds should not be needed.  The following
ticket asks for an extension of OSCI to avoid them in the future:

https://issues.redhat.com/browse/OSCI-2320 - unable to apply a new test configuration on an existing brew build
This commit is contained in:
Kamil Dudka 2021-07-23 15:56:43 +02:00
parent 0f0e1c9fb4
commit ad77edcfa4

View File

@ -1,7 +1,7 @@
Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
Name: curl
Version: 7.76.1
Release: 7%{?dist}
Release: 8%{?dist}
License: MIT
Source: https://curl.se/download/%{name}-%{version}.tar.xz
@ -382,7 +382,7 @@ rm -f ${RPM_BUILD_ROOT}%{_libdir}/libcurl.la
%{_libdir}/libcurl.so.4.[0-9].[0-9].minimal
%changelog
* Wed Jul 21 2021 Kamil Dudka <kdudka@redhat.com> - 7.76.1-7
* Wed Jul 21 2021 Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)