From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 11 Sep 2025 20:26:21 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uwlzx-001wUI-1f for lore@lore.pengutronix.de; Thu, 11 Sep 2025 20:26:21 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1uwlzx-0004Dj-8z; Thu, 11 Sep 2025 20:26:21 +0200 Received: from mail-vi1eur05on2095.outbound.protection.outlook.com ([40.107.21.95] helo=EUR05-VI1-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1uwlzm-00047h-M7 for ptxdist@pengutronix.de; Thu, 11 Sep 2025 20:26:12 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=nFl4DYk/T4zcYegYy+todUmiJkUNrSiHQstwvxlz2L307f/c5LIPeaFDVcnoiy1idBRfI48nAiVfrKheKtuU8/cMltDjOXGA/Z7BpySg4e5cJ8/Fws9lqar002WNcN1VI7Ot1zC/PkdCptDOUZP/89TsG4bk49BeukZ2pfZWAxfczYqCMvAz4pdvbWLXoj1iwyHeVY4vpeMOWyXJeUUFPWbyPwOEUUAqPSu0T2JeRRtLaj1sbwhbVWJnxzRdqkF1cH0DiZ6Py+N6zjTQtzeDlgzSa28SGsxjH2a3OlJEUdLqeCY0hPh1y5ZXMznAnHN1crH4IcBIvyAcA5noz/hlRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=R48Xf4QlnyjSUcJZf8+8OLciSnQchE7kHWKajreT4V8=; b=rsQ93L9+c9/Hl4xGo138A3ySe3/LrMFLFn7tbDCYG88lXnvWaSRbN6yW9PMmXg5jnkjNVDJN+siuvk3Fzi0ef+WSOJ0jq6mfOgGKkPTrPqVwLpOJJYc6NOROyMlMiMpMUzWN0enrlY+mfDeW9CzKTNZXpilN2kewhC9C05jV3M8uoW30hQIiLM9cWcV5o/7+lz9eozyoxk7YN7pI/tQTRzpJwlwE4nxXw88P4keiX29EZ+Vt6eJzbbhmGzgEhS9EkP7TQiQKUmtI3Proz3oeWOC85FWCYDQol+MhczsHHN/hbiZ4g/AJtI1JBVX1+B8KZ2mOtr2dlDTCNNXF7bea5w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=R48Xf4QlnyjSUcJZf8+8OLciSnQchE7kHWKajreT4V8=; b=M+ZzB1j4nhZkql+yS0LzCuavNhB1J2HOzh+8Ym6ykaDu+DeVF0czppo+++WNZLLhOKBiVlueEgVozq435/cNbNYxv5c9A86YninXvCDYlzwAxamP0NySroomI57DbiXyuoPenYc1ld+zwdIWShxSZSTJUF+drjTHVeeC588cE/w= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by MRWP251MB1171.EURP251.PROD.OUTLOOK.COM (2603:10a6:501:74::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9094.22; Thu, 11 Sep 2025 18:26:03 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.9094.021; Thu, 11 Sep 2025 18:26:03 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Thu, 11 Sep 2025 20:25:56 +0200 Message-ID: <20250911182557.3409454-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV2PEPF00003855.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:9:0:15) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|MRWP251MB1171:EE_ X-MS-Office365-Filtering-Correlation-Id: 41248992-9599-44b1-f8c4-08ddf160aa5e X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|376014|366016|1800799024|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?4y6H2AGBj5rIGMZt4bEYUAUG/R7o3QUwZBr/AiHsukh0i9jhTRo9d/0HDpVT?= =?us-ascii?Q?AW/BLZnj/d5Dio6iRhKXYABGYck8UkGJXYYzcs634Do3R2sjp38ikRZTRqHM?= =?us-ascii?Q?IhCNA+c4EjX6WjXUfQMWiEQkH1wtsJEd4llErSBYnmW7r4jKsl2ME/OGA9gt?= =?us-ascii?Q?qb4SJYm6X8kTDooXMqhzunxFbpup90Eaxzt0cmt2rMfSAp2xXQgIztSU+74P?= =?us-ascii?Q?cMZecISRcxMu0oKRS0vqqkYEYZFPvP51EklKCrEqGWcnwi5uvUxbyFERsF2A?= =?us-ascii?Q?o0apSeNRj5IKCO5zjwfz3ZtKwK2jEGBe72WZXPRgSfxBWvtdB2Hx8UtR6P2I?= =?us-ascii?Q?yz/ZegcbDAtnzzrXmm/RehRmAiJkq2XcIxsqeqc6d554JUxMQpqMxC52Jf71?= =?us-ascii?Q?gXMsGbA24UEZDXLZDakehUMwTHOlisRa0yY4EH25SdT1ron/GaFCxeI+MGew?= =?us-ascii?Q?NFYnrJ/h4s/5nB1N+k2900c0nCMazniEgT2fUWTlCSu+9paqSPrhQWSFctTZ?= =?us-ascii?Q?H8Q7Qhhm29O1KLNyMCx7qvrozo5ObPIJ/7DefbwGG4Tf24RTvDXiGwUgeOoL?= =?us-ascii?Q?Qug2ThlG2uBUynsIhHKmf3qzPE73Rtfno8ImTRdlbv3HsQpUYhK+kYYdNGjh?= =?us-ascii?Q?0ZOiewnDUEpIRJBpADlJznvZZyAmanilfveXc45EUXou/fnaDND7d+J7mpAs?= =?us-ascii?Q?qq7ufEKBSQKlMDcJeK9eSR2bEWWibJH4tC7t3VwoYS1Ww3zb3z/gogW7yrVl?= =?us-ascii?Q?urfqsVZ8R+2ntuVCf01oJ3YnoBybTkF/5SPOzdaGYWVLdsR3qcgFTGe/X1LC?= =?us-ascii?Q?EYlOHqjES0kWbD6pItEki53MruRKwJyLZZ86qDye1YvENKQ/3jRatluw1IqC?= =?us-ascii?Q?Rg4EDZEX8z1e18aRI3+YGObBXvQpk9GvdbcJaWLx8LniTrmBOo6pv9OJVl12?= =?us-ascii?Q?yWk/t6e4Q5SKCfgsJIaQIBr3wrnfV3JyNwUki58ZcGmyyrXfQt6yEkA4YXNR?= =?us-ascii?Q?0+fVuvH00uxIkv1Pvc32wmJK1apghMoMID7ZWVgfzIA3ZGDsHb2Q28FNELYa?= =?us-ascii?Q?Z1yprafOVPiy7/FTMR6BxaWZNds1d6/gpPdz7QPCLKCjT9lWrk+ytQHwYxtx?= =?us-ascii?Q?BsJz+CB7X5j0tP3LeGO63vJGPqSLnE6DuZvgqYO3WJ0/KZQUxDyQS1JlQ0oJ?= =?us-ascii?Q?5D1CW+2ioP0NZMmTuQsvuzWHwKjqNcNwsfnVE59+SBtYTTjxTUc6ogBRk312?= =?us-ascii?Q?UK1QvXFDyiNRymKU7dEWcgp+HCarCEXw9ZJY0NRVmp1BctA/PSRYh7vCUjMs?= =?us-ascii?Q?ZqUtIkChafI04pkKHJMkflkX8Mk4vIRO6KS5F63U3VI2TF+gvmJmvPjaZyHs?= =?us-ascii?Q?mYdrgN5xTkr853P1mvIbdslQGyebLL4LTBXPSyFa/t0R1DEnxwGMAnyErHnC?= =?us-ascii?Q?vHjv5n3wWrc=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(376014)(366016)(1800799024)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?nJJcq0EqOjbDky62TRrrKs7/Ii55SBSvlYwQ/AHWAuJn9aesU+6NbWu1RPWr?= =?us-ascii?Q?mwcCVNoFRsryEl5Fkd+j6a8KB803Y0oArZRFeocVTSiiqKl4xrO7aap5rq3j?= =?us-ascii?Q?qyOikUOgJP8O1SL94OhlSf4bNwHcqvgoJGJaM6/TFKIwhkQJ5hDwOPFnFKFZ?= =?us-ascii?Q?HcK4WqXMTWPdFIS3CTo3zyVuhB0mzqmqW9VIFOtOsnnjAb190GcE5WELoVmQ?= =?us-ascii?Q?LB/m7D4vJP0I6VjT7J2UDGHac6/qFS5pVHzQbDl/A3XFClneUcy6BoC5SxZy?= =?us-ascii?Q?HbOHV/3qV4TTEbN1UWrygkkCuiyjcX8rzz8cQz9FmiUueyZ1rz3pRiZePmaB?= =?us-ascii?Q?7R2zgMfbpra9Xi9gAMk3iKtZgnYD5WYkN3wNYmSoxGq07sC6JBoQaSJ30Nuu?= =?us-ascii?Q?N46Lrs8tbmRk4BJ4uuxspKxOZqywNG1GYLLoW9kKKy0GvFintsREHOKjsMmS?= =?us-ascii?Q?8/e53foRow+Y9CHRbL1QkDZdo9FkAhVN1A9x9Rtmjavo7goeHSi/CUys+mLo?= =?us-ascii?Q?tywJoAVwWp10/lk7LnGna5GZZGi+F8jxp3bDnXv23WQ/lMB5W0hjyrHgIypR?= =?us-ascii?Q?BPiKVjTmoPI7Za/4Y/ZrE26VrItOGlYLYLLwaxgCQVyWtmiEm2dkdWJDQdvT?= =?us-ascii?Q?rYNMHJ4qpDamf3ZQcYGu4rTSrhqMeaZrPqg65Yxm0mtyuSh5lq84TUxEYp8b?= =?us-ascii?Q?VTSPAvVq8XA392JAk//C/UPEvrmUtRkbg8sX5jZ+lZZhuXcIoYvfvOcDQuQO?= =?us-ascii?Q?EDk3I7hzwBOG7ZA7ZMPzONqa11Gq50cV3JsC6Tdp1A3RvDAlbEdcZAlYt7hp?= =?us-ascii?Q?iMymFYD6VwgieIdUiA3fmfZ90grd7Q/0CI+jrXeezS0yELe8WI63SKC00EW8?= =?us-ascii?Q?4YOiydzkJ3acGohrgWX7jAHCNqn47cfstA6JLH+xNHWYQKR1xsdOsbpmHj6b?= =?us-ascii?Q?20cpWRtFQVVVKBtnQ2juDKlkmnVUhf2nBIv1nGCMH6bCIk/uwrJjuXAmio7Y?= =?us-ascii?Q?tgZM3IXdX8QDH3zQgsNhFy42n1pTCcDrvwkk61Lv7VMPgHHaslUE3MJACnpx?= =?us-ascii?Q?JNTwUsVLxPk2ddW8KabyICIXdmeNmXJl59e60xM/ZBr7Wyfa7uOw7BOLFNgf?= =?us-ascii?Q?tUtvIroJye+ZBDPSTv9vHUhYhyAl4cXRULRTBy2FkNBcrl+v+QXsqEF0Q+U6?= =?us-ascii?Q?dAXclkGJXfBVFbA/ECCGlIKa07O+qubJKppXTnEJeguosMicCwM+yw0suJK6?= =?us-ascii?Q?hckhr5QNo7lWxuJ6YfRIehCAJgFeY1Hr9MipGtw6bL/dyB5R7jBCUvtmu2DI?= =?us-ascii?Q?QMIUs86iajX0aGtVPGkA2hH0HIqFl1Vc75oH0jG51Di3zjRMrwrKXnqScwuD?= =?us-ascii?Q?lbuwrH4UhxdFZtiLrsqeFXFTkgy3rBDetW+n/akVZl/C9jOcvhSFM9aKRgqg?= =?us-ascii?Q?4b23TDnM/10wqHBh8Ytfzzj+61wqV2kSEpaL+u+zLHz5IBegqpOfN2Jsu3OH?= =?us-ascii?Q?9iHMXCmXJtQaBYoj6GFl6LHfJKX9Pq9phOnc1/ebGIQCuDX37qCUCjvp7OLG?= =?us-ascii?Q?sFyOS6pPcQOwd0B6qz7gZ+5bKFf8DRvXX97YrsQS9fiX7fYC7skqQPbtWVQk?= =?us-ascii?Q?+w=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 41248992-9599-44b1-f8c4-08ddf160aa5e X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Sep 2025 18:26:03.6076 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: m5C5o8XHg6TxlvK9SQOeLPPVaNQz5184TzNOfV0lK9jkf3cyu9VUI7tfj3n2bFtKTqq/oytb8d8yjcNKHyREVTQPqPgcnuc8poTHGDvusyE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MRWP251MB1171 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 1/2] libcurl: Version bump. 8.15.0 -> 8.16.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Nothing exciting. https://curl.se/changes.html#8_16_0 Plugs CVEs: CVE-2025-9086 - Out of bounds read for cookie path CVE-2025-10148 - predictable WebSocket mask * Remove dropped build option. Signed-off-by: Christian Melki --- rules/libcurl.make | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index 0d5ec66c3..ff9c8b0f3 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 8.15.0 -LIBCURL_MD5 := b8872bb6cc5d18d03bea8ff5090b2b81 +LIBCURL_VERSION := 8.16.0 +LIBCURL_MD5 := 3b5aae755714b338af0f66726bceb62a LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) @@ -132,7 +132,6 @@ LIBCURL_CONF_OPT := \ --without-openssl-quic \ --without-nghttp3 \ --without-quiche \ - --without-msh3 \ --without-zsh-functions-dir \ --without-fish-functions-dir -- 2.43.0