From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 08 Nov 2025 19:31:46 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vHnj0-00GkIY-1K for lore@lore.pengutronix.de; Sat, 08 Nov 2025 19:31:46 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1vHnj0-00014I-7h; Sat, 08 Nov 2025 19:31:46 +0100 Received: from mail-northeuropeazon11022143.outbound.protection.outlook.com ([52.101.66.143] helo=DUZPR83CU001.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1vHnie-000147-5x for ptxdist@pengutronix.de; Sat, 08 Nov 2025 19:31:24 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=R3+F4ltIxI7RvYnyHi+S9fIS8vh1g7H5sH9KyaDrZVEniJNZTfAdpu1pYRHSN0G74OTCSwuDrtI/ySvaVxQQjfa5YV9Cv3nPV+Ks0yUVqD5Is6TBcbAROoMKh1CIT6NcvkIAq7wBABmwoZwzL9XxJer7UXCDtT4WHKAVZzpvsJB5Ad6irN2Ieya6pO1IkVfB8K4ycueZyxPnY5Tgv9xlPtOFfBAKAjOC3niN9VJPS5/5RYjDYKkqC9SxD7Sn5bELHUKuoUs7HZmEakd3tgAdLV+xU1W87UwYbJX03RHunXsnQIOV0hpxiiVUGLo0ws+96ec7p0g6RVQPyqPI/mS0gQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BTkXeZbA5nBTcror5xN6OVE7SFw9sWKZPOQTUxNvzIQ=; b=x8HTaKRT87bWXkiH70fXHGFxsPXpZHIckJ2cuqBc4NfLKFF3CYA+I6MlsOAgo7FLs9jhfFs5wvAjh0FL+NtL/wCk/00h1kg2E8IZlo40aq4j3yB6FJxn/KwdvS4hVZUwIgTv2jFkuYrTmRkzsKnKaye/kX1lIQe2V04WKHNLCD0+GtJpskZoOj2RbPxYJuQIY6KAJaow4+Ogr8r+Yamxg4gMU9V/G/EzBC0AVas6/ocCZ5tZ7Fa8UAUpYM4qV87bwbKejE7yv7aL0gSBL4P7v5EiDvtkHEOlqTUPOvsmYogqojvwZRQjOcf0gjoXGdfarDkCG16oOR5Myg3EbH9VXQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BTkXeZbA5nBTcror5xN6OVE7SFw9sWKZPOQTUxNvzIQ=; b=APLsQ4tk3jsBcwhFdJnr9eRVt0rlsnyJP5xS54annAp9Ak+z+mrnL3uuMutrfDwF3/MTdh+zpX1/R0IWYHMgbzBrTLbevtHycx4OSKzsNVlaC+PVq4kVIKlLhku0kHaoCiZFQlifmQPgzYFZSCbltpu4IoCIPsh9Rz41pm0hRO0= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by VI6PPFAE715D2E7.EURP251.PROD.OUTLOOK.COM (2603:10a6:808:1::162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9320.12; Sat, 8 Nov 2025 18:31:20 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.9320.008; Sat, 8 Nov 2025 18:31:20 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Sat, 8 Nov 2025 19:31:04 +0100 Message-ID: <20251108183104.2357696-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0079.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:274::12) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|VI6PPFAE715D2E7:EE_ X-MS-Office365-Filtering-Correlation-Id: f38e74fc-d8f9-43a4-cfc8-08de1ef502c1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|1800799024|376014|52116014|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?M5L7KQ9sN2mWGZ4+Yy/sjMV8pmiQ86Qcb/Jin3zJ3CW0wopMNCCyaEZXTNXJ?= =?us-ascii?Q?Um4WTjSZ1zD7XZQuz7/QGBZPzAPQ1wz2xOLGBEoETiRopwkVkZ7ej+WHU1cP?= =?us-ascii?Q?Cnc/paXKSu3M3oo48LYRoeeEl4JQq7RxujASko0M35vfDaYtAmaiaHbVdNqY?= =?us-ascii?Q?NV9WzJcOT/c4Da6Ig6UI7flRWN6xYWNl7oRgZiqqYIwCGQR0QSyKOJUMO+T4?= =?us-ascii?Q?xeBXco0pzUjxWsHT14fRMpADYAzQpXggm9XcZpxNzg8GLdWJ41z90kkWeNn4?= =?us-ascii?Q?/F3/Pem3qoHC32+neBMVt6lk17Qul3Kq1OYzDzAEpidU1P/MEYzOWdJftkUB?= =?us-ascii?Q?uUWfZR0Yon14ThnrGKKSa1jr9XzCA6b2zzqLj6/8Qp0fYrkyx34+VqieB8Rc?= =?us-ascii?Q?H7IozfC8bqH/kGvDo6WVZVNrIktEOlxDWYrcbdGcKJ0X3h/k8Mt6g0ndTAeO?= =?us-ascii?Q?CpoXEbcDfL1T3j6NpPRBSU9orGCVgTlk/YplvkgxtbKaXpgF1+wR9+4B3w13?= =?us-ascii?Q?ZEB05J2v1CAF+R8k5SObt42HzqEoPHJeb0WD2/VmzvvckHYt00HGTZ4OKbhF?= =?us-ascii?Q?vPCkBZWfhaePWTmJLPTl765j7S+aAcu4AKhETJw1h8OOSW9OdKRz1eshBne1?= =?us-ascii?Q?EPj/ODE/3N0Zz0vf9YSzjvCSvgnJUfZAXgRyj4PoAmLkxrSwrtQQz/AyZ3Gc?= =?us-ascii?Q?DxvBCHdNxbolM2kPH6WvkKH0szATQ0L0qajYtq0hSQl6XsOQwLF8taPFQ2/B?= =?us-ascii?Q?j5+25o35aPL6OoPPSZKrYUijIF24Zm0v16dvWmciZyWbpKtPvHQV/FQXFo0p?= =?us-ascii?Q?rjKzydjt8rqIyRtOjAhuNArOThxc2qrklCd4aaRUtKJn/F+eX80xKjoelOYE?= =?us-ascii?Q?UTus0rJjwhi5Z489qD6HBqPPALHmo0x1FHJdOTv7/pB/2XwjaW+yRf7+joUL?= =?us-ascii?Q?RV2z7fEQKV0HYhS3EP1FBloXwXl3ylcKAxGMa2qx4o9MAmDYfOppAMV9miIJ?= =?us-ascii?Q?PYu7EQkuNOFdJmzRJ20VRVqCiKVcZHOWM8auOewULrL0+hE8CfKk88LrjnXy?= =?us-ascii?Q?trAcj93gjY0yQ1stb3M29erhUq9yJpWDQJwA1GKfsA54vFS8FiGDkrVrcj/X?= =?us-ascii?Q?6DgDBMmhmZjcaX+GmHZmPEK8aDnYo1ZXu1Y9Ow6d59e1WD9II1cUsyudlZ1L?= =?us-ascii?Q?LOEi456upezD6p8un4y8wBNcE181Czfsa6cdcvVzIAH6Pol5b6LBJlAS53ZA?= =?us-ascii?Q?HN+F15jVrSLjaPP1AFXZvAEAps5nu9ZKK2gGTWogd1w62adHEevun3suZzUW?= =?us-ascii?Q?hzJAbuoV4jqAxZ3Q6Ne7/dOJbBbpW2kVgb3S+sfQkD7y0pFSG+yVgy1wfv/f?= =?us-ascii?Q?mE8dsM9U6SdnsPbJKQiRpyzwmuwxNMNgPZ/Jo4OxakQqQTkNfCpp5ahoQ8TD?= =?us-ascii?Q?ekeZUgd+7IQd7x5Q28w9fmW7nHpE1Puv3lMIhZDUE0Tz+ful2VK4sA=3D=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(1800799024)(376014)(52116014)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?TiNg3uxc7pxhNmPIjIToQE9101IclwwR9gVpGo7gZ15J6Uev7r/a+ks+pE8+?= =?us-ascii?Q?8rqaBVbb95/A/5IgBCFnhqc5Cni93362bCF2e9lpx0IOUKcmwqsnr1OrLLeU?= =?us-ascii?Q?OAWKUdv31mElVCryxRzORYeHIn7zN1YVlkMpPEWYRL1+1/oIGCU9qvNx5xyp?= =?us-ascii?Q?TCsGSLBvvhSMfQIoZQg+ij0Vznj7BoRWCWh68JOctOwrSxFSgK/Cev6kOzn2?= =?us-ascii?Q?giyaGCCyJjOkxZpFLg3eRYjNlLScLRKEnjW12AGp3zT1XTiEdGe7XA2Q38Qi?= =?us-ascii?Q?xk+zvSqAH8n2eiENmKbQplpiM1HXnfbyl8/e0+Yu7ilEBG47L483YFTrXdUA?= =?us-ascii?Q?05NlLo+zy0B/ZEP8/SGIXx5lCy4Bt86ueVHurQM/D0OWz2DnHTs6suwSSStG?= =?us-ascii?Q?8QwUDxgwnzTMPMEkvQahMXIgBbHeEujsTPRkHZ90NU1Sc/OvfcJYUbuOyPW/?= =?us-ascii?Q?2z+w6KlKQvb2szP40dvEtqGFYG4xTQOWYo2n7y1/CJnK/DuCk7uI1tPKbjYE?= =?us-ascii?Q?N8ptMvEozttwXroi64DQ/85nFUIZVk1U3h/DqVoT9L9K588BShCxTGlVP/4D?= =?us-ascii?Q?HvkuhavG+7pyd86NZjBk+E88JT8eOQBTQmvsKODKhHqzvbd1am5zysbGG27V?= =?us-ascii?Q?ilY/HCQBJFbSpjGuy1WCS4mRii6gL4KKzqebtR41gssYvN33WQp13goJMdr8?= =?us-ascii?Q?BO0m6K7+ruLi2xWBp/UvxrBuaXbGYjPsg1Fdl5lha5cWs1VQZ5Hlm0fKmuwc?= =?us-ascii?Q?limVIzvZ0oIpCOqYTINXbhxe6nZPHueKg/tw/ZsnZoC9s1CmQvPWnBVIPaUA?= =?us-ascii?Q?vo2SgfEkk593hYY/D3F/t6p6ztDh9oOe5cQIpxsbvFCqNjACcvOT2JhPTXy2?= =?us-ascii?Q?0QAyrfEX/2YZPnlHGAwyizZLXLKXTWC9BFXG/mnGNdLZFAMqzRdZRhwkJquX?= =?us-ascii?Q?w9SOzFi+hlG5IC3NCxupB+lCZGLoHjLnqi7M1ZKhA3VI6bAqGpbJGk4hy076?= =?us-ascii?Q?nAy69eO2tcpwn0EhNjc2s1B0XiLQymeeQ/eI6iWSvU3PS9Ywhv1kUgF0cx1z?= =?us-ascii?Q?u8BQZEBpeEJ5+Y1phGg5Lis2WZbUDxssNEyucTdVoz958kQYiMNYwHp5A0lb?= =?us-ascii?Q?HqDZR6KB2udc7qR4IZ0O5yn2o3b3J1smhQajq8Y5NtfwnygeslJKlPSr6Rs+?= =?us-ascii?Q?obbQlNdSYPssKtwLCT9zOENylY1B81+cVwRQOYXvCLcPKHHMEEWVOXdD+UZU?= =?us-ascii?Q?Pc9XrZrCLUTlyFDnS1lAXqz0QPEa12O+IkYBMSMV8WK/R2Fl9LvFWoSCp23h?= =?us-ascii?Q?hqZDzm4D5LjGoLtaAq33/TTaTeLoYBV0HSwOhEfhfEnWlB625ulPMyYUHLPQ?= =?us-ascii?Q?yDzoUfsSUELL806oi5lWsROD+DCWK1g3PtGCcVCc/HxypK8Dib3FSyAXJN3A?= =?us-ascii?Q?37pyf0JDotHsWeOPRe9If6L5nCDSKSawo8kZlVdomhttplJiSFid1BqBu1wd?= =?us-ascii?Q?eeAVvw60l1CBWKG5j+BxxmJH+wufMMGv16iDKm25HJEUhGNR2Co1t6+m+WpT?= =?us-ascii?Q?/HtgSNapruH5WuyLeOcpZ4ukBF3PBE/wLR7sLkTwVi3bFwoCYsaeY4fx95TJ?= =?us-ascii?Q?PQ=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: f38e74fc-d8f9-43a4-cfc8-08de1ef502c1 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Nov 2025 18:31:19.8841 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 4D9cpA9RBjzZel5lDfLHX0vCD+TfkMxxWucRj2Rlm2GBxIc2xBl2OAksUIAAoxtNgQ0VNg15lZ8d3bEhLUApSFZichfgwWjzMJV5hXDqg2I= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI6PPFAE715D2E7 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] libcurl: Version bump. 8.16.0 -> 8.17.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false https://curl.se/changes.html#8_17_0 Plugs CVE: CVE-2025-10966: missing SFTP host verification with wolfSSH * Remove configure option. Was removed by project after CVE. Signed-off-by: Christian Melki --- rules/libcurl.make | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index ff9c8b0f3..e16c30cdd 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 8.16.0 -LIBCURL_MD5 := 3b5aae755714b338af0f66726bceb62a +LIBCURL_VERSION := 8.17.0 +LIBCURL_MD5 := 7a9d4b772fc56d68479b0416f234105a LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) @@ -122,7 +122,6 @@ LIBCURL_CONF_OPT := \ --without-libgsasl \ --$(call ptx/wwo, PTXCONF_LIBCURL_LIBSSH2)-libssh2 \ --without-libssh \ - --without-wolfssh \ --without-librtmp \ --without-winidn \ --without-apple-idn \ -- 2.43.0