From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 11 May 2022 09:21:18 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1noges-009M8l-C1 for lore@lore.pengutronix.de; Wed, 11 May 2022 09:21:18 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1noger-0002NC-PQ; Wed, 11 May 2022 09:21:17 +0200 Received: from mail-eopbgr30073.outbound.protection.outlook.com ([40.107.3.73] helo=EUR03-AM5-obe.outbound.protection.outlook.com) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nogeK-0002Mk-G7 for ptxdist@pengutronix.de; Wed, 11 May 2022 09:20:45 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N4DCy1Ahnu08OxzKBeNIBrxblghJtz4nKZTYW1y7yw4Hp/8O71gDrcyLP5BdHxYxO3TCUiE0XCbdTod4Ee3q9swRQquJugORA1JmeIRFVc24v/VoliUikoyerKy/GTsznfFnxWlZLEbBMhi9cSnlW8/8ChLahXwf1ssEVm3StI5SfSmQ8HtBfNuC/m3Y4Q8aaSDwO1l2mVm6iQKwCt6DEgIiIZcMRB8lzy7W++m7Oi3zTgt+s1l1qD2iUYWP2qrduvTFBQfSeip/kW1pBfPAPnW1SY06bG3NzPOrPt559WB3yUHIg0PGun0v71fihw1fhydasMsG0r62n+KzxJEzog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=l2NqQ2hRrkeKUtXJGNRL7J688I5Yh1+EhjP/5ziHDeE=; b=fpgRVq8tpyTUYeEf/spQYL/AW8eJSmlnN4fqPyGuR7ymYrU1ftxGacNskL8S3wPud02x/HI2ZBEOc9z7L9ez4IHGfp4pXMv07J8DaUaYppiNpxsSfllIVM1Yh9wMFdQ/Gqt7N0EKNOVu7/Rj9yooN7c4ZoSiRNRmEBSqk4CtsJPepFIR0nZYQ7/zUgE0axtCo3BAwLcimcn1KIci3n363AKyJT0K0MlfevMolFtGbdupbZjEF1M9KselBT8ayxBJ0MeMYZBzEbohJwDOGDym7SonEu+3su2DV48tbgLsUJNLDnMfoQWIfHgr3bLrtOo8TG6YoaYEF1LPc4DMUuP39g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l2NqQ2hRrkeKUtXJGNRL7J688I5Yh1+EhjP/5ziHDeE=; b=cqH0ZbUdWxFMOPv4SjZyOg+Oq2jmME4UabNevkRdBlAiGytbhIzh98F8oxuy0B7PFscadt/r+yXAU4Q2tJ9Uc+7tCMpru7MyqNMbvzWFM37lSNEQqD/uTi+onIhXzQTa05H4oUO7+hCfmyP7W6+zvZIrQV957TPh0oAP1NKlvdM= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS8P251MB0230.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:405::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5227.23; Wed, 11 May 2022 07:20:35 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::1d7f:19a9:18f9:57af]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::1d7f:19a9:18f9:57af%8]) with mapi id 15.20.5227.023; Wed, 11 May 2022 07:20:35 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 11 May 2022 09:20:28 +0200 Message-Id: <20220511072028.1152041-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: MM0P280CA0047.SWEP280.PROD.OUTLOOK.COM (2603:10a6:190:b::28) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: bdde453b-c15f-4d35-efcb-08da331ebd93 X-MS-TrafficTypeDiagnostic: AS8P251MB0230:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230001)(346002)(39830400003)(376002)(136003)(366004)(396003)(38100700002)(83380400001)(8676002)(66476007)(66556008)(2906002)(66946007)(36756003)(508600001)(316002)(6666004)(38350700002)(6486002)(966005)(6506007)(6916009)(52116002)(5660300002)(2616005)(1076003)(26005)(86362001)(186003)(6512007)(8936002)(44832011); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?8sdeRu0z1WahX0n1nJT9GagagsSsmvKg4y4K+hcn5jmksFg04SYKr3EObU9K?= =?us-ascii?Q?BFHgdzTvkuOqsbHyMjxbu38In4fatAdeHslYRjPwz1rfbUeWt20k8pBkr1kf?= =?us-ascii?Q?ZzL7EUUJiytNOpyvfrPCJcNfcZhWe/N2olqsytl7b6wHMXriIZ7VD8RGsfGN?= =?us-ascii?Q?yIqPTu9O9jKlJABaP67F6Y0w+TLQZvAEKMS2sQ6IPawguf5JjzxzM1Azk+7s?= =?us-ascii?Q?b9fu6lMfcjOQPF3tNd5qNsjf3bKt/hlS8EVvjeXnH+oKoHWBzMxsMX1Us35Z?= =?us-ascii?Q?j5UdTsCC3ix+PlTyh/bpO++kt3NwoeHcbymutVfKi80TgNJncWYGDs2b4+vi?= =?us-ascii?Q?LnSeBtgEUxak4H1qcOKZyHIJ9YNE7rmuYeyfag34RNRtDJczAxBtHkCSqcTb?= =?us-ascii?Q?cM6IHPGP/iEFLKABDyslp/I7BkEDz4OIETjxv+w3WggrDLcZCvTCuGqlA6qy?= =?us-ascii?Q?SSQBP7WDC5Tx4+/Fw4FnuchDld0rNizjLQBP9c7Yx1biatnZL/dHjWtWwk4P?= =?us-ascii?Q?7NDoLVqsoqsnmTOwzbMbc74OQXQCTfS8DJNKXKxpEZFbxPwRReU1JCI+CEx9?= =?us-ascii?Q?g9U2xW4D+UUlOSS7YEBVVPTOrh6b8xmiNJk0iVwh+TsQRNtNEWn4SkONnJ3T?= =?us-ascii?Q?H7+tF6PRse6Q7EKH4bid2szrUqXoe2U2tcfN5bcFLgKsMr27EgeWqkQBroL9?= =?us-ascii?Q?6duOwI27hY1sjnKyZSGXUOONlzI9QNskpT3wwj32dcUc66qarOrTMa0MVIHt?= =?us-ascii?Q?FBmfytIlGtjXRHErdRBT1Yjxav3XDD6lt8T0v3aXtSTbjsDT4JgcJZL/vI+M?= =?us-ascii?Q?ME64n/qx/C+GIpi6R87GSNRFRiFAyR9NIs3oDYlsP1QYEEE43vXD5PmZNZ/7?= =?us-ascii?Q?LDYpCVIaPhhEYR+C5ro528AdBKy7gykRfQn1q0cIN++hOGeVRqoMCIllEVUc?= =?us-ascii?Q?th8EteLPsVAyREYBQmLw2f3AwVvwDn07UokrrhXpf2yIORtV3QMEFBOWXBAy?= =?us-ascii?Q?TFyG23wPS1KtLZFDhard1P7Q87lwuaHhadAy+RuItXyyPSKv5wHX7VSFAGa5?= =?us-ascii?Q?PFeWvTHWTYmaI4vf0ARLDB+Q2kuWTcbzQd4aBo4EQG83NVAHUTdAUvyOiqY5?= =?us-ascii?Q?a8sjkZE/b88bWYoDiMkhmAnAE2F4pvZmCMoHcgpM7XQYG3Qr8KhW7n6j4qOd?= =?us-ascii?Q?0sSeUzy6CJhh7J91RijJF3/jjnEAOnlOjv6QhLV6VLpgclLNmJV17NpuF6B3?= =?us-ascii?Q?R6fbfKq8XPezmIeX07pti9gjZ5gTBK7jzbeWWYFKGfEjyzGB0ogq3dd924Br?= =?us-ascii?Q?oGDy2fMAaBzHbihvZZcsAqjQjWEKCFagcjoyqAz2en4kQlvvk1Xzc0HR+/5A?= =?us-ascii?Q?kkcy61cWYmedmM7BhYrgLc2Wodus6ZsN5Po9XzJg5l5eZiGMKOxUhrmc0L7T?= =?us-ascii?Q?fisiHf9GgUnDtnKb13TWBZcSWDWUUhQma8zj1S2ZVDcF5iZg1VQH/UNPPwqD?= =?us-ascii?Q?uUiuBntsJeFWQ99NIQEW6TQTr8b6dUYUDYrGlPnMZPfSNy+O+OK3tLDS1WOF?= =?us-ascii?Q?WXGsJ9owHZkzp2OEgp8pcZx+pq5uT/dzmjqIOn9doO3a3cV3pp8/qeMFkEZb?= =?us-ascii?Q?0BmUE16Z2QYQzuG1B9Rs9HG40LbexezPmnFQklewOqCNylldqmKngqbzc6sp?= =?us-ascii?Q?q2pho1YUvpDsFzfAiKZAQGC5ZhzmKqdlJlBEiKR9VQoEium8rwblU0hxV7Lc?= =?us-ascii?Q?zTi9YOEd2T8CDYocySZJcRCV+KJAdp4=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: bdde453b-c15f-4d35-efcb-08da331ebd93 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 May 2022 07:20:35.0845 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: D8+jcs2VDrurxD8NAS/rp5XvcKQ9DrvYCbrG191056zS3V8BR98Nylx5aqa/o85Mjo/VQv8HGMYe9lDJD6nCC6hjToAPxjgWrRe7nsw5XLA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P251MB0230 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libcurl: Version bump. 7.83.0 -> 7.83.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Usual churn of fixes. Curl is seeing an accelerated CVE ticketing. Probably due to a functioning bug bounty program. https://hackerone.com/curl?type=team With 30 reports in the last 90 days. So probably expect more CVEs in the near future. Changelog: https://curl.se/changes.html Security: https://curl.se/docs/security.html Plugs CVEs: CVE-2022-30115, CVE-2022-27782, CVE-2022-27781, CVE-2022-27780, CVE-2022-27779, CVE-2022-27778 Signed-off-by: Christian Melki --- rules/libcurl.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index 3840b2abd..8faa948bf 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 7.83.0 -LIBCURL_MD5 := b7924acdea33dedc3150a044789ed0bb +LIBCURL_VERSION := 7.83.1 +LIBCURL_MD5 := 08c6d9c25d9cf8d17be28363753e42ca LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.haxx.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) -- 2.34.1