From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 25 Jul 2024 16:16:18 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1sWzGU-002pIg-11 for lore@lore.pengutronix.de; Thu, 25 Jul 2024 16:16:18 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1sWzGT-00014N-1j; Thu, 25 Jul 2024 16:16:17 +0200 Received: from mail-vi1eur05on2091.outbound.protection.outlook.com ([40.107.21.91] helo=EUR05-VI1-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1sWzG2-000142-UC for ptxdist@pengutronix.de; Thu, 25 Jul 2024 16:15:51 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=L1p/WtofwzPKX5BIciAdJOASEq0RtV8UqDzuHU5xEZXdupPAyPKd9oylX/2SMS6mupVFfLU7wAiwimdA1pjhHhIedm6+B3vd83IsUQTuipBFcKYWamhPmfH6gEkj5f5qZ9/x7JYwiEky0P6JZ5tUWyk4FG6lDVtO4ZOguEAYZQLHPE1/O7iVOL1x2hopBjNJqudtb0P25C/IRaiptMUSdJEaVUXxygwDifX0WjbWdt0A2tp/UnnZeTARkTgJj9Fe4BIvbEd2CW9ePIuy0QVg4VkZwxbHZiwzpkvteO/iL0a16piGitmcIvmw+D5l7XhxCYdJJ7c4fSijaCmJUirsnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xQmEm9jLr+4N576PUKoDsPaBC0OTTq6QSEnfSUT06+Q=; b=CQkXMSWqZZ2dACFN/9GE2GQTpqg4vl+jVdEnSWUHrn44jJCrHYHnaCfPb10VCM8u9WlaACmnfpTlD0UoiiJXtj6PoL3UWCb7nC89MdEUzsR7fgGdQ7mTiUK6wIMYWH/bOhWlirTPEPeyiUPjhGJjZ5a/r5nGhpgapUn7N8TZyxr5XtbL2uztg5WgN+wNYAmLST98cJLpmf7Ut04k9aqxUwhv8E9rUCBTovvnfRRTS0luz3NYgDDq1UxMu7V4JAn80AhO+ZpXaeR3alLZv7+HpjeuxFMcdpZPkzKaO+ERtj4M1op+uC+LI7ZYG8SosLrpfZmghywY7p0DpIDLrr1+ZA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xQmEm9jLr+4N576PUKoDsPaBC0OTTq6QSEnfSUT06+Q=; b=Ue/WzYf0WhVU7/akZzf1MLDbP6H05yeMNHvaiRlwz8ygYyF2W5ICpMCNBleBIM6BSKnfMVyP0bgtn6SKfnoshNdtpp29m10QM9vcljNOUYnZWC8PZ4TMLfk5dnVH3W/HAo3Nv/+rQV7HRpNDLpfBCUUJGoF4PsOf0J6nejVAebw= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PRAP251MB0639.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:29c::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.14; Thu, 25 Jul 2024 14:15:46 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903%6]) with mapi id 15.20.7762.030; Thu, 25 Jul 2024 14:15:45 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 25 Jul 2024 16:15:39 +0200 Message-Id: <20240725141539.3699889-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV3P280CA0094.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:8::7) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PRAP251MB0639:EE_ X-MS-Office365-Filtering-Correlation-Id: acd7c22f-53f8-40b2-68e4-08dcacb44678 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|376014|366016|1800799024|52116014|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?j6bbMXJ3VTXTBcWFfkmfFYZ5ve2UEkWrMULK3qgjka8IRgeLLXuEkGNcdh1Y?= =?us-ascii?Q?eZjgpUa7K4q1mT8bNacwY998X54o2k14lBfpZS7wEt9SYVjqqOEcA4HZnLL2?= =?us-ascii?Q?7fgb0yAwMQff8xUcIssnM/Dlzv/Gc5wROhvMtA+DXxpR5iWAyX8TEuOWQLeH?= =?us-ascii?Q?SwNdHSc6EIMylRfF067NqJr6lUFHqWMfZ4gv/0tRABzrakkndCzT0L47eTD9?= =?us-ascii?Q?xwEkHhen6m+ZGPweWGB6pA1T7vE5nyXQfgF31/UJEdJK5YTSUTBWIx9ImL6G?= =?us-ascii?Q?qCpz5e86JEa4tZAgIGgzEmRBUXlvJtCSkoZre2927xlR3Cx0LRlyM4ruFCQx?= =?us-ascii?Q?l0x55UQd3LW/IiYdmCvAMzgIEye849KqEO/Ai6kA+BHU0Y69Axch2V8ulEgW?= =?us-ascii?Q?/FP+MJTVx7Xa9HEJiP/epobpfrMNemdb7mZpt7v9au2jqzQIuFxG2qYAjvrZ?= =?us-ascii?Q?tE5tJrIXK2hI8jbUbhl6gOk26V6mT79ibfBkMIu99W4djDSehzKHqz7x76K3?= =?us-ascii?Q?WiPmcPrA5DXSvMJB6iP6z99c8Xt+P0epSgusRDn8fhNzQajAGpgW4ageH3o1?= =?us-ascii?Q?djVp9VBju15Jb9bd5lhLBr5h9uc6+BiGc0QxOSLzkFIispraNNelvL9K2OCq?= =?us-ascii?Q?wn00OWJC4bYSW5YDWYpFPAy8tV4IfH3y/OR+Gc6+6B5NTD1TIxgnkdhewIsi?= =?us-ascii?Q?X5P3Uy4HDgPTPa0cMKqlpTLAt074ip/8XR0t+giLpzAE0GRUfftBfwVkSdtI?= =?us-ascii?Q?2So62wv3UsM7njMBGeLApxQean7ghRy1JqDW/O3/o3IhKhE4izkoUDtSvqsl?= =?us-ascii?Q?utFuiH1iQnShkYIpwDxWaCHwcb9i7ncluMZxIFqSG0A7tnnGqK8fsH3ctg6L?= =?us-ascii?Q?C/x6P5nL0Nqwkmhxu9Xms77Zzmkpi0xoBOL8erpnMXdRjcYDRuIWR1/O3MRP?= =?us-ascii?Q?vLdAarXOi0lCbHDElzxJkTSWuDJz2wbtjGwhJOo51qWeEKnCEWw5PLv4czxk?= =?us-ascii?Q?+VPmkCecF8p1lBFz/DkbM1wpY5H0rzTGPRDGQd1oqqJ84rqYDvpskY6YGOt4?= =?us-ascii?Q?tkIqAuapmGgwfnruFJGDr5YZD6oNxnMxM3qfDoeuXF96WXGfBvF+cH5ENkZF?= =?us-ascii?Q?IRIfw8wyUR2ooxkw83neexWkL8KhdhL2V5jA9Icv+hToYjTFQ3ETZXSpCp6z?= =?us-ascii?Q?Wjd17iuMWEiJqhIeLOWbgK0n5Qel3Jd7esqHPKy0TWQSgqK9gw0r6L/qVtaq?= =?us-ascii?Q?PZbcQ/sblxpBQSy3S9YbZjNyapBJSQ+e3kwz/+OuZJjymg1Y67EWjDkQKkwE?= =?us-ascii?Q?+4wB+yqYZsy49C9Y+y/CXSHuL2s6nQgOAoq/mDjjndBkk6lC6CsWtvHOpbrL?= =?us-ascii?Q?bPcGuw0=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(376014)(366016)(1800799024)(52116014)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?ETHZ+5V659yt2NIUGOMv1cKRzjoIfYPuHML/rYv/A4bBMn041anshPJgCJ4o?= =?us-ascii?Q?JqulrGl/ObhMG8Df43Lpmb0s0ZYTgRjrfF95N/SSekcos3qdiZGYV9pQdoZn?= =?us-ascii?Q?7o7KxD+ldHuBNY/2o383u7FcYTvp3J6GwxbtwJPndluMQVYLMsrx79JTEkjq?= =?us-ascii?Q?4YWaPe8qW2rIVLpD/blbYOids+5viAYGdsARlp1m3Azao+onorcdNKROKBOQ?= =?us-ascii?Q?8t2HirXRFOb9BVBHgDPLmNPaMxw+EJOQH6NYTZTVzrsGJOhnaIvHUfSHyab5?= =?us-ascii?Q?ZF9T6kiEkrWLQlXbxQjwtmh9NRMJRYdGg95fa5MAIjjtiFqe/MYZxFgMtvr9?= =?us-ascii?Q?H7geTftPPGpI0d4cKvtXy6ir37M+xwbkRiQIMxL1XUH4uKL7m0WEElHUqSeT?= =?us-ascii?Q?q0H+fKOY4t71HRH1u0kOB8W4TEXLiNrdKnvrafgL3+LsiuCPUubMV68e1JuT?= =?us-ascii?Q?L/KnCaDomGZGYkPwySAg3hg/gwIVwBGqExeGigkHoRhfx71//M05TagxJ9hF?= =?us-ascii?Q?syVUBmz+8rRA4hwIald1dlEl874B6SDovFVKtaOSJ2M6zHUzapFo/NjVqtEl?= =?us-ascii?Q?jWqV3DDXCSSgZhbYZ1ztw2a5Wp06nL26ppKsgpLMTF+nvjaa0P2KAWiGZ5or?= =?us-ascii?Q?XNP1hiUpB8rjSelKjvblSZIxS43Si/9JZ60h95GqheNeOSH0TJkADcMP3Li+?= =?us-ascii?Q?EAv6boucSuzYbPcW/M3xI/XucJ6b6ZuHxA+d45U51Oyz6mWttktoVPZNMlXL?= =?us-ascii?Q?4W3HiKAPFnyBh7EkfFL6c9OumEp40RJ7G5Ze1K3D+UxSoiGd1naqSiwLaOI8?= =?us-ascii?Q?+BP1D19uQIZ8KisUr3e+63l0VXJFOUC1tcAhOdqb88jGnHXm/bud/vxBRUu6?= =?us-ascii?Q?MLslaSJb/trwdZppFa85WLsAeWd4qFKVk7ha+YYUwtFGoE78ZQvQyAq0c7pK?= =?us-ascii?Q?33zWvRXMtwlLtiAK/mbwHwD3eDffq5HLKN5WhIQbvS0P7OASp0HYMiH+1FJ6?= =?us-ascii?Q?ZPJWpV5n3aRkjmUlDks6Zxc6CwCXxMgEi05teMqjfzDGMfEO6eQraPBCC3Zo?= =?us-ascii?Q?Qwz1ZHTfobjCwsDRDhN8ni4ZgMpUuZ85jpr5maid692kYBz7JjDINBU5Ko8s?= =?us-ascii?Q?7JpSMprALWVSNE+w1La2WnIzPwKq1B8x34bN5T441Pi45BntncaFDdxTP6Va?= =?us-ascii?Q?MUvlvhmm1GoMGHLsfXaDFZiA/huPwsDPBwbaZuiSnICtuRVyGUIxn9knrKTz?= =?us-ascii?Q?+ujpuU5rhVPM1NmS0Y2aZnB/E4asnPIQITEVflheUywbIuVn6WThCgtYvQ1B?= =?us-ascii?Q?C78RjIr0pqQ3aU2GdJ1vQAfcjTsroS4e041K7MNfHmdzV282cbkQHbSjQD4I?= =?us-ascii?Q?yCoZd4O0W795p9SGN+6FOI0/+ZLxNJVdm31/rr/XNzogJ7qwHn8pqjGLey5Q?= =?us-ascii?Q?RVQHBXa/MOtOJ9LqqIkmTZaBWfLSBZsH/7cBym+p+eN5LxRj4uinu4PW9dbq?= =?us-ascii?Q?RfAND/nrnuRXIqnsD4bXFsgCoCuBX1T5mms04x2Fmhz9bTxJP7ZfzZr/yKgX?= =?us-ascii?Q?I2MKkUwcp6eSWupIS8QLQnB/QEe2NpDL3gzyB+GSejE06WzFguKX+wPIS8L4?= =?us-ascii?Q?yA=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: acd7c22f-53f8-40b2-68e4-08dcacb44678 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jul 2024 14:15:45.8236 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: fDup7wtJa4x1JGVvNm6hCGM+uHTGOX1Untinr1LLbex1s95/GtZellitddU644GrQmzVnA/r9UG7guAT/dNGTwVpCxBZkS3UVlKTNmrvyr4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PRAP251MB0639 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libcurl: Version bump. 8.8.0 -> 8.9.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false https://curl.se/changes.html#8_9_0 Plug CVEs: CVE-2024-6874 - macidn punycode buffer overread CVE-2024-6197 - freeing stack buffer in utf8asn1str * Rearrange one option and set a new option. Signed-off-by: Christian Melki --- rules/libcurl.make | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index 65c9714b2..b5008117f 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 8.8.0 -LIBCURL_MD5 := e1062de8a9b252a75fc42e2252746bd8 +LIBCURL_VERSION := 8.9.0 +LIBCURL_MD5 := 6f6d2ff25c2a8fa8602511dc33201cc4 LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) @@ -43,6 +43,7 @@ LIBCURL_CONF_OPT := \ --enable-symbol-hiding \ --$(call ptx/endis, PTXCONF_LIBCURL_C_ARES)-ares \ --enable-rt \ + --disable-httpsrr \ --disable-ech \ --disable-code-coverage \ $(GLOBAL_LARGE_FILE_OPTION) \ @@ -62,8 +63,8 @@ LIBCURL_CONF_OPT := \ --$(call ptx/endis, PTXCONF_LIBCURL_SMTP)-smtp \ --disable-gopher \ --disable-mqtt \ - --disable-docs \ --disable-manual \ + --disable-docs \ --enable-libcurl-option \ --disable-libgcc \ $(GLOBAL_IPV6_OPTION) \ -- 2.34.1