From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 12 Dec 2024 18:23:05 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tLmu0-007Gbj-1e for lore@lore.pengutronix.de; Thu, 12 Dec 2024 18:23:05 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tLmu0-0005ka-O7; Thu, 12 Dec 2024 18:23:04 +0100 Received: from mail-vi1eur05on2071f.outbound.protection.outlook.com ([2a01:111:f403:2613::71f] helo=EUR05-VI1-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tLmtj-0005kR-Nl for ptxdist@pengutronix.de; Thu, 12 Dec 2024 18:22:48 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NyZmSeVlmiPxL3fogCS5eQ78qJ7KZUpfdBco/LQm6Jk12S942TQQ0RZqesrqkvZBqm8jJDT/sKbNI34ef/QknGRUvK6s+pJsig9+jPqLpvr/+x8GimiSZPTPblhRfNZdrnKnVNX90PwtgE5odiBeLfmy4gDIgp2+2O8xSko+vk7dhcXdW3UwVBpeDCw/TdT0swS7FbOf8qQ7/1mYaOK1c0e7Zmjhu813K1XUhk2/58tH4oyZy1aeO7YtqfxScH7qk2G55Nh57vcKSkbSvNTLB9dj34MImN52eWye6jDrVcPAuqrguODBtajaclTXMiA71RWWJcBiUDcx6Ajakan+dQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zXsyIMe4ecn8eln+fgQ6PlREB84SfA+0SUe8mtuozQE=; b=TjVh2tcZknPrj7S/PpRxL+nJW43a3A7OfQsVSPdVPWS4f4LSdT22Kx4KPxiFH8DYGwdDDIKXMyqaJSMHFnkwmSl6/QBcA3BusWW6T7PtaOj5p+x+1/r09KyamjGCdqiIW+lqPrRa3AMCQUNt1BOEWs3OnuuxpGYaYbcCO/OnM4r3DP4eF1hN+hl87Ek1thYfzzDU7pxA6R9PppqoBNy2sJd9aYOTvAPu5rx628LYn7/FRhHywcLFOUEoKESlWMPDFrXPZjFfSCXLqEZKtyYIDpnYhCjGx3q4pE3hCfdk1jSKpEDGYaR/iRrc5pM02W3l5xb2nbbbTw6lJ1XMtrgMVQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zXsyIMe4ecn8eln+fgQ6PlREB84SfA+0SUe8mtuozQE=; b=IL/SprSHi7z6YJ83Wybg/WbhmfyinQgOGCy6jn72Fpup0iyqGIq9/NTQi/vh1vcv1ZGQVB8g3XsWH4pEZKKPaLf/6EXrs0wgC9q1sdSTBoakCjlpkbxgYLzmtoNgKycMihadGijwBEdWVr0Tfp3Dh3vZGwIrHqyQz8i0iF7vaKE= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS4P251MB0463.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:4b2::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8251.15; Thu, 12 Dec 2024 17:22:44 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903%7]) with mapi id 15.20.8251.008; Thu, 12 Dec 2024 17:22:44 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 12 Dec 2024 18:22:10 +0100 Message-Id: <20241212172210.1163075-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVX0EPF00011B54.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:8:0:18) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AS4P251MB0463:EE_ X-MS-Office365-Filtering-Correlation-Id: 1f000cfe-8910-4860-bfaa-08dd1ad1971d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|376014|52116014|1800799024|366016|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?DxZGoyIJMRkQCw1MeaS939jwwvRAqigQqDXnIqro7npXzbFcPDnqQT+WP58r?= =?us-ascii?Q?NPr6uUXSurIJys+3+rZH38/kGNMFJip4s3VakQXu1+QQF89r9vWQJIlfE1w0?= =?us-ascii?Q?mTEOT7Y1Q3qelTny2AQDRjqs1jFQzJltU1cMeTOTBNodJWPW4DHWgLimWkc8?= =?us-ascii?Q?kh4f2Of9+hK7TXq+JtUSv0fR026zMBi6CRkjGAQXIShncIYjHGlRBvW9cugC?= =?us-ascii?Q?TXV0IxsZbV0TtRdPtxVof676m0qjnjsytV4n3arzdUKbDZ/POKZpeBNkT77f?= =?us-ascii?Q?qTcNjiYGApXv1OMAb89jbOeJcK3Rf0dK0KywaZSzLtCWvINQ1FD/21IsBuGq?= =?us-ascii?Q?PAxIQ6uEIzWdsoMPzPQN6ChhjHe+xPEMTjEjS6wUPcbomIJYapzt2ebu0EzY?= =?us-ascii?Q?bMCSB0ebj27SP5wDc28UGpeSed1EJk2MgZVK4oVrFfenY5Xd1VA28rGG8Mum?= =?us-ascii?Q?DOazMvgjvIBYR5CeV+Q6ovsSEYxkT2Z+qYgw2YJ/Gj+v9aIlBx884WNiYTzD?= =?us-ascii?Q?oU/a1gk52bXYhtm2/r7U4/Sh0fGN8RH2yxZ+fw/KHufs4MCODc7NA7GM33MG?= =?us-ascii?Q?JpX9vKZM7vq26Xjaz4nvD5Yt/pC/va3wqFbJ3FEQ9nAmE0dgJMY8FR+mpmly?= =?us-ascii?Q?7jzuD/i11X6D9eCt7mHbO/rmOhF9CUi0Nmu1FX3kvznyJ9YjANraM4efzocE?= =?us-ascii?Q?doM+0TbNkZkzZwaHAht2UPzr0QigJmDtZ9qGmWr9APkTEfjh11vWB5Kpnm2w?= =?us-ascii?Q?7REw5HhUyMqqW+9OOBhmOuw2DLpvT+/QM6744YuAE88XtYxDT/96v+JlYt5B?= =?us-ascii?Q?FDm8n/yRplyAaE7I70Mbx7z2gT0hKeFeVAFizonOAXZM1juvMRaGr7sSyZ3v?= =?us-ascii?Q?NycXEF6V+dOSOna+CRygObCfIAe9mxhb6MIq249V75AKm9LHuTgvSYcxfeEP?= =?us-ascii?Q?XhgHlUIZSDoINDuvUZS2aXa77oggB/b48RfEaGzvXsVHm071LJBJbVOF7Jjd?= =?us-ascii?Q?8koEurC1Cf9pgzoONPMGTi6lox5k1dpqZJoQHbWrLdVMvt66nNybsjlKHclb?= =?us-ascii?Q?SCMeOi0HoaS0R2lnB40apWO23ENymigRiRzGU2t1Fb0zbcvBrDivojXTmYLk?= =?us-ascii?Q?9pl+jDoW5hSDSQlXtWxRnYR/9Uj/qSFrQJrDV/oKX3konz4MTtqwHf39cHNP?= =?us-ascii?Q?TJIevkB24jQ1RKr20k9hw+KF1URnkMIHw/ZmMmDImPW82dVAcNwdSngSrbTb?= =?us-ascii?Q?mLjcrjGug9V/h53EbjsXr4GmoXKt4A3LcSdajYyFy96mZRltOiF6vCJf0uQS?= =?us-ascii?Q?ST4lOCtgdcq2NsP2yzBpzXnfsss7XELPNDFa30i/hS7uP9Kyy8v3bP+a9vCj?= =?us-ascii?Q?W6zSuLo=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(376014)(52116014)(1800799024)(366016)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?hNrBbJDc9SDFOF320pdQZiT+bCl8hvc34PfFOnzowODK7c6AkkfOJCJpXcPw?= =?us-ascii?Q?mZcXLT6iKTXURxuRs++eseVFZRbcJ/G/KVHLryrYdaE1MjWkLwj3G5lxl9pJ?= =?us-ascii?Q?qDX/wClrfp2hBpvmscz70VazHpLPEdcytRx68/ShfHftMpWdDYq8gpRrdvEF?= =?us-ascii?Q?utTMwyFZu5uNAYp9+nmS8iU3YZFsNNLDKFpRjiUHwxsZKAAgfQfmkmd22Hmj?= =?us-ascii?Q?uRjvAEHavjGNenwkihugz+fSAql4Oe59ZE2tAECXRUjBvqaT8mw87MRxB2PR?= =?us-ascii?Q?OgOx7Gx0s3NGhgJtOb55cR0ik7V69mIWu7hH8JFKc/myvSEcfznY3jEN5CaZ?= =?us-ascii?Q?m2Fl2VpU24AvdkiKtCOBmyO0owXZwHg9AA0inqj8jygJ7nK/U4u6hH28M1zG?= =?us-ascii?Q?0LKp7K6IO+hH7PSBH1jI+CesRiWPweq/1770hacGu8+7vwRV+ZyrpgbtSCwH?= =?us-ascii?Q?x2wp2t+1xf9OeGodbuScpaHbQaeDKmiHRex5/jJGm5FZi2LuDaCisn2TkF3G?= =?us-ascii?Q?alp8wtAMxdMmEK67V6Bigi2zFQxYJxz1EmopZTv26aav+ysLUlexerGYw8KB?= =?us-ascii?Q?fHwPPCCfmRQXa05Di0o/ZpLlrfsnB9D9z/f3SYNjYPYRN98baVnZX8dmUfF3?= =?us-ascii?Q?p2H8IB9pwENk2oUv5Goo1OfmUMK1hpyU/Tzn5pjn8+VUrZtoSAxJCM2031uN?= =?us-ascii?Q?CiRB3qlcdHFI9N9ZNcj773nEE5TMxXwn4/RBdJlcbdRgFkDsKrFrLljQthoD?= =?us-ascii?Q?vXGGshIhNJjx3aQT2bukWfAROwElJ0VgP4VRm3f4nGjZ6OYOf9PxtR/WatAX?= =?us-ascii?Q?Bdd+8FFbF0dpo3FIcjHVFK4FbhYBR63/yHjvBFVOMpLo2lLxaL7G6vLdR/ZC?= =?us-ascii?Q?D7iVytRudgP1CJayLRT9MrDyGYsDhnaxI7U9dHY+nRSAAMWOnyDh6C0xKyQ6?= =?us-ascii?Q?PreIZEL+df2O0xv4c70A7rsccwx4KwdrJzkR0wT5/oZWfC+zC67zy2CIF9vH?= =?us-ascii?Q?r1q8ka/pLVey4LJO8G26g74OPnlRAbUgMUPqreRqD6xwkthiWgo3dAyByv1+?= =?us-ascii?Q?DzdRQEzxkzZ0pv8PXKhjYfwtC20gcOy9DI0KaITCMm7ZnIOqK9gHdSNew3bS?= =?us-ascii?Q?69Ow9rJD9n1FlReIythBQGoD8f0D40UYsR+2htHa+5qYfrpfL27R2DZTPyQJ?= =?us-ascii?Q?MEzmX3OdgDJqtY+QakMXLm8VpwFMXPRq4ex1BIva0+V2ZUqdLm+Ev1WhXAqq?= =?us-ascii?Q?AUaKkHm3JAS9A2UoLwAvRLN/ck6iEsC8WKAhfaVOcuM7zQrsRNiv/2FxiqSe?= =?us-ascii?Q?d/wGDb3F8B2oyejk2uIMvbDbW8VW1cVr9JqjSEC/Orkb3R04wuNH6b92mZIR?= =?us-ascii?Q?m90ijc4PIHq2YcZVRxi/kRVF1I7ZLM4EwiJW1mb51Rk1X1L82NMQSbma4gGe?= =?us-ascii?Q?bxMrzq30x3jLpJexbs+0Your3+uR6ZD/yG5MlQ6BqvhXW5peM+2GNsOn3ewi?= =?us-ascii?Q?tbmHm4NXqZnxoHhWA9U8nJ6S3DTCTykY5Pp1JXLb25B8NT265GVNH95keDG/?= =?us-ascii?Q?aoLFyoFm7gNb17jHLd+P/xU6/U157QJYjcjBVv9K2f8Z2JpyOOCxYOISM07V?= =?us-ascii?Q?kA=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1f000cfe-8910-4860-bfaa-08dd1ad1971d X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2024 17:22:44.4890 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: S++tYdsI0dJnNRJlOyRLWGlOJIJVgkKuYSBsbK43TC1dNBXAGRxyWRL3zEaU+t75qOh0OMXb4hH3O5UCqW21wlTeLs3vnKjcfmBiY04wlKM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4P251MB0463 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libcurl: Version bump. 8.11.0 -> 8.11.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Bugfix release. https://curl.se/changes.html#8_11_1 Plugs CVE: CVE-2024-11053 - netrc and redirect credential leak Signed-off-by: Christian Melki --- rules/libcurl.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index e2e905657..4ce6fe031 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 8.11.0 -LIBCURL_MD5 := 49dd886ac84ed3de693464f78f1ee926 +LIBCURL_VERSION := 8.11.1 +LIBCURL_MD5 := 25e65a5156ca4928060b61cb051813db LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) -- 2.34.1