Subject: [PATCH] gnu: curl: Update to 7.77.0 [fixes CVE-2021-{22897, 22898, 22901}].
From: Leo Famulari <[email-masked]>
To: [email-masked]
Date: Mon, 31 May 2021 20:23:10 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

* gnu/packages/curl.scm (curl/fixed): Replace with ...
(curl-7.77.0): ... new variable.
(curl)[replacement]: Use curl-7.77.0.
---
 gnu/packages/curl.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
index 94dc51cfc5..76b9b9840c 100644
--- a/gnu/packages/curl.scm
+++ b/gnu/packages/curl.scm
@@ -53,6 +53,7 @@
 (define-public curl
   (package
    (name "curl")
+   (replacement curl-7.77.0)
    (version "7.74.0")
    (source (origin
              (method url-fetch)
@@ -62,7 +63,6 @@
               (base32
                "12w7gskrglg6qrmp822j37fmbr0icrcxv7rib1fy5xiw80n5z7cr"))
              (patches (search-patches "curl-use-ssl-cert-env.patch"))))
-   (replacement curl/fixed)
    (build-system gnu-build-system)
    (outputs '("out"
               "doc"))                             ;1.2 MiB of man3 pages
@@ -152,10 +152,10 @@ tunneling, and so on.")
     (name "curl-minimal")
     (inputs (alist-delete "openldap" (package-inputs curl))))))
 
-(define-public curl/fixed
+(define-public curl-7.77.0
   (package
     (inherit curl)
-    (version "7.76.0")
+    (version "7.77.0")
     (source
      (origin
        (inherit (package-source curl))
@@ -164,7 +164,7 @@ tunneling, and so on.")
        (patches (search-patches "curl-7.76-use-ssl-cert-env.patch"))
        (sha256
         (base32
-         "1j2g04m6als6hmqzvddv84c31m0x90bfgyz3bjrwdkarbkby40k3"))))))
+         "0jsrc97vbghvljic997r9nypc9qqddcil2lzvv032br8ahn5hr0g"))))))
 
 (define-public kurly
   (package
-- 
2.31.1