From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 16 Feb 2023 13:27:19 +0100 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pSdM9-009KB3-9x for lore@lore.pengutronix.de; Thu, 16 Feb 2023 13:27:19 +0100 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1pSdM6-0005Jp-63; Thu, 16 Feb 2023 13:27:18 +0100 Received: from mail-he1eur04on2080.outbound.protection.outlook.com ([40.107.7.80] helo=EUR04-HE1-obe.outbound.protection.outlook.com) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pSdLs-0005JO-8I for ptxdist@pengutronix.de; Thu, 16 Feb 2023 13:27:04 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=C6SvbUGr9usE+618gI3+Vkpwr4dSxwxcF9g39RVJo+Gb3wBnw7+SyfbKrMuNgGrf9bZ3XU4RiE0yu48VA9YxFhCxyVsWzR4nwsd0UgD7Ny/HbdMucLyfm1KY6Yi1govVnL6L+ZrPa7BfV759UKdsAzuRpC7NJYn4Nd5niJD9kMslOsSGSppB3Zt+gYSH1vQWOjNLL6fv+chWkMXsIyqTsI+qNUdhXU1maIX8qSivVg5Xb/L/5TFYNkEr+PxzQDRT70ZlWMUmZOT4V24BTc0iFEFoMP/ok12dFLdORhAPJ+BjC0qOmQwbfmWXgHr4YEBtpACLp7XKSyD4sgfktFDaKg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=x4fxgAIrsDIJvKbxcSA7SG0wdgcZWD/jwxW1pWLusY8=; b=c4UPSPdZFVJSaVfbKxlgopwmi5NteWniWhlwJehAYZ7Xi1mHiENhEqOMC8hYVALpXFBp9UJZOyug9+xPyYeBxCAGeVv/yVUHetKb1RWcCsF7XSNoWiWMpVw89+8XSfwz4twa4bUNBr5CilW6Bbh0RCQbT4UX3l0hrC1jTM1yD7r0oLlj6VaS2kbYhuiK2PsZgLqA4tikDOSPVxbHtjU0kSj1TdJ52WvnM9UOPVGp+SFXk3W2ZHDyuR/lBMXtSNAZX7Nwp9MeJkUb/DGJ7OLCTN3ljWV4W9jHYW2zfL7QmTwpUNwu2/4rdvk7CjxH/UzbkaVpr2/HZjFbkGTdoDb17Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x4fxgAIrsDIJvKbxcSA7SG0wdgcZWD/jwxW1pWLusY8=; b=gT/cfDypeNdQqt6JYrXJxHpBrsOr3MdyLF5Q1i20PYak/NfuakE6b7/WUd2YTz6P25HDx+m1cuxURQZ5ZTxBJ7gnREsS8fQjSkHxRba6dLv2ddaVxi+bqcq8NROsqGh2O2cyIPIHOzNQpTkxypogevh28AJnKa7/6LUB7aobfjU= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PAXP251MB0669.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:28b::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6111.13; Thu, 16 Feb 2023 12:27:01 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::b403:7f6d:2d9e:4dcd]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::b403:7f6d:2d9e:4dcd%6]) with mapi id 15.20.6111.013; Thu, 16 Feb 2023 12:27:01 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 16 Feb 2023 13:26:54 +0100 Message-Id: <20230216122654.668142-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3P280CA0084.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:a::17) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PAXP251MB0669:EE_ X-MS-Office365-Filtering-Correlation-Id: 27884a04-58b7-4b56-e2e4-08db10191ae3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230025)(376002)(39830400003)(346002)(136003)(366004)(396003)(451199018)(86362001)(2906002)(2616005)(38100700002)(8936002)(44832011)(38350700002)(478600001)(6486002)(966005)(52116002)(83380400001)(6506007)(6512007)(186003)(1076003)(26005)(316002)(6666004)(66556008)(66946007)(41300700001)(6916009)(8676002)(66476007)(5660300002)(36756003); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?JsgigkzjDgRjhBoyE5qWgMUIfMkZ43rpSR9XoNo8mW6GGg40+W+tLJ8qA0zn?= =?us-ascii?Q?5LA7zz4RPQ+8gou9oGfBkUwFFg5V9qJIJWlwVg0zdpAPpjIuOcS3Mct3QfJm?= =?us-ascii?Q?9lPzoCzxQFb5Ax97YyOiqUOeSxMRBMP96GoOyiwpDf+KYO0CwUluyFWX2cys?= =?us-ascii?Q?PW/DukqSIoUyHwUqzHhjS2MJqZvv9tg+dVvbdprhlOkAd71NSTl63vnjZR5M?= =?us-ascii?Q?gFNz03oR5/J8RO2P+oJ8oRi7zlonmcv8kT1/xsNlU3+/lAS6K2ZTgGSg41J2?= =?us-ascii?Q?E1VQKiBIZFbXSyYkSBzlLa904DfQjNVu0ZuhrjrI38piPOL+1W511Uo03ELk?= =?us-ascii?Q?T2MGInHYbmhttdbplEna4aNuTtN3zjyfapC+NfHNGdpxTZDoU741LhNfzkX5?= =?us-ascii?Q?XMNVn44gVPN6qb4Z3nJJPpg/Ww2YSCeWco8UNci7UDsaWBY3pGoymyGuOzqV?= =?us-ascii?Q?ZJbl5PvpeZdlxfZ3alR38ZBsiszZIps1sY9y+8c0TcUlwzdRT6RewL6NdMHA?= =?us-ascii?Q?jCJAuCckj7fjG/8ymPImJiJUvWE5SsJt0UQHjJF3GG9XESEAAS5EoZzT9fjj?= =?us-ascii?Q?ApEe/huNVx6277e44mlUnxTEHAo5fzZkQB5Aplav8vDAogFARqmJwOT3uync?= =?us-ascii?Q?KKiH2VwoRToxVbP8gJhojM0ni7mEvQTq5M3OL3Yp6U7drJ5wtov4SPygbekm?= =?us-ascii?Q?xdKzf827Wt4ukYgz+a672jzf1xSHoWYbFzO7ljzaWnUPMlaYVs57/HfJ16Wm?= =?us-ascii?Q?NeOgnDZIUVWgkMGmhc/WLLdkvwE4taVTrqX4kK+8I8kS26cv4nKCcmyzXY9P?= =?us-ascii?Q?ns6IgsZEMNVJMnD52GgViMtqd22ymHP9sEuho45VQax5AQRx0sBq0UBoBt5J?= =?us-ascii?Q?zb48eXUxxX5ESyu8rEVXQ8lVcKPc2oGSbuit/+iMVjm8twNP2PbY1QZjx3mL?= =?us-ascii?Q?Vc1BYpAQ3euN79xlhpI55jfqApNRIVg+4C3VbF61vcr0NFcW9H94lTlAoucf?= =?us-ascii?Q?vMdllzPhKMkqBrm99m7GHwsD4rIydEwlKW65ZuAX6XZ06Ejpb0KSGw4zgjcH?= =?us-ascii?Q?kxLTt8rLftb1a8FaompOk9FWqqo2jpo93qhVkwt7FYlgxUxvRKm8nuKeMw7x?= =?us-ascii?Q?ppglg6rXEUCFdAX8i/Lrarb0Cul5jo4vYeemCTq9ioc0U8tzrZnCmkMFIAtO?= =?us-ascii?Q?mnUB4c9sUogCGJOyxEPhjSBq6CCWqsafYOf+PBwIcdhEDx/nvurOgxxltOu4?= =?us-ascii?Q?wxmsGjQ1qtvi1IaMZ13zzhexls2Y4oTQsawrHM8txwsD2wbvuFZpygrm4swz?= =?us-ascii?Q?YgHr6YuHqEpHS1YogafZPr5lP9g/MlSzduhH/e7c3p5tnq88VbTCrbXk8kWs?= =?us-ascii?Q?UIUNbHqZWJimcB580CGFnI+btajwUSOleAR+DGrFNWY41CtXrFopfGVSvv/S?= =?us-ascii?Q?wCXFF5F2/8ayZeFxf9hHX9O0UOwmoTuBUNFTV4F19+BZs04qtbNVww2txpok?= =?us-ascii?Q?rmgIBfwo1mXgprq7YrK4AIahIr4wC/O8bVruuFpoE4WdImzkAmWhKKfdocwY?= =?us-ascii?Q?RgIGo3b+6MWY5GS78dBHVdF8gtyjXaxtQdhGPiwuRaYcaaPJ+wkOt3eKaJHU?= =?us-ascii?Q?jw=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 27884a04-58b7-4b56-e2e4-08db10191ae3 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Feb 2023 12:27:01.5519 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: nKeIIBe5TvPIiaqoKBa1VDFZXfd1hA981t+SzPw4ItXigyeSp8EagKBaaFNjQYZdBUyQr8xRISzr8YWv33GASsMR3+h6lYdxXgu0HmICwbc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXP251MB0669 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.3 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_VALIDITY_RPBL, SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libcurl: Version bump. 7.87.0 -> 7.88.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Mostly a bugfix release. https://curl.se/changes.html#7_88_0 https://curl.se/docs/security.html Plugs CVEs: CVE-2023-23914: HSTS ignored on multiple requests CVE-2023-23915: HSTS amnesia with --parallel CVE-2023-23916: HTTP multi-header compression denial of service * License file changed. Copyright years completely removed. Signed-off-by: Christian Melki --- rules/libcurl.make | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index bb989d8fc..f2a6f86b9 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,15 +15,15 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 7.87.0 -LIBCURL_MD5 := 0b0f5de173afd303229e5272689578d7 +LIBCURL_VERSION := 7.88.0 +LIBCURL_MD5 := fc56109bda128948dc2c89b157da0e41 LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) LIBCURL_SOURCE := $(SRCDIR)/$(LIBCURL).$(LIBCURL_SUFFIX) LIBCURL_DIR := $(BUILDDIR)/$(LIBCURL) LIBCURL_LICENSE := curl -LIBCURL_LICENSE_FILES := file://COPYING;md5=190c514872597083303371684954f238 +LIBCURL_LICENSE_FILES := file://COPYING;md5=db8448a1e43eb2125f7740fc397db1f6 # ---------------------------------------------------------------------------- # Prepare -- 2.34.1