From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 02 May 2026 22:16:55 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wJGlj-000Inh-2O for lore@lore.pengutronix.de; Sat, 02 May 2026 22:16:55 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wJGli-0001HS-Rh; Sat, 02 May 2026 22:16:54 +0200 Received: from mail-swedencentralazon11023120.outbound.protection.outlook.com ([52.101.83.120] helo=GVXPR05CU001.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1wJGlU-0001E3-Og for ptxdist@pengutronix.de; Sat, 02 May 2026 22:16:44 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ai06SdIvJCrNoTDjOdHSMTRLRp15qR4w7/4/f4qKJEBS5Z4NhlPW1PddgVNVR/0yqcs9CaH7AhIaTAioHX6I+juh+NwNyfC3KMr4Bfly+oBuApONiJ70Ptmu6aguRwKzfM4d9qyv8AcXMXrKbSmZHoDbF5Qn6NQxao6pIDh/+zygWA6yfHIbodYU2oJwsm8jdNYVpkKoNupdxhxE76P4qxbbpez3l6pVF4Eu7CmjUuWmSR1M48y97rCd6fXt/68BZOeqQ+Lz6b0ECpdRf+SB9bK1ZDsrWxfIWeEMUsY9S7YvRAmSkhf9O06P7JeopPNXVHxtkxP1Q0BG/n9Fk/DfSQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=WqpveiJYzK5NGlnaWusaSmWg4w03tMI/zmzC07/UsDQ=; b=UPjN9D+3AymguPrVnDfBsrHjAhsXCxXThjrafhqFkrmVPLB7dCh4FLT3FjC7YdFwiH9GtvKlye2X+vdgDuk+002SEwU/goJZFZzR8e4wbk8SM/aOJlPQwdpAaVFSx5NmG9GUSQP7xS6vdhjTzphSYvc9M1idaUqEX6KKn8Xh9ID1mjBz9bBYOrffTlfLzKD3tW0JK/Z+OmTn5r2qXmzB3rOUFZcEQ8A9k15xPAoaDI4XQTz3whREGA2l9iaTyWts5Je9rmGfQm4azrkI1elbvdtorSfHVd5WzVR/m6sCGNYvxlj0qkO0sI/QnLR9Ae9kXif2hN5Jn4TvJaDDcBiWvg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WqpveiJYzK5NGlnaWusaSmWg4w03tMI/zmzC07/UsDQ=; b=GjrnN0IIet3JhVC0iIlaqfHroskpps99hykfBWhJWlFEtnqEONBadAdWalAQD8PcIBaPx06kgnLYwe4vFhRsvha71yfgJThyls9qup9GwDJAkQ9+XlxUEf/T2XdO5yFiSMlPaNr1hVGG3TWUCZEyVtDBNhJ9eIFAJVOSHn7PKJw= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by GV2PPF9315CC4EE.EURP251.PROD.OUTLOOK.COM (2603:10a6:158:401::b5f) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9870.23; Sat, 2 May 2026 20:16:37 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%4]) with mapi id 15.20.9870.022; Sat, 2 May 2026 20:16:37 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Sat, 2 May 2026 22:16:29 +0200 Message-ID: <20260502201631.4003064-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0083.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:274::16) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|GV2PPF9315CC4EE:EE_ X-MS-Office365-Filtering-Correlation-Id: a5fb2972-2957-47bc-2747-08dea887b6a3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|376014|366016|1800799024|38350700014|18002099003|56012099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(376014)(366016)(1800799024)(38350700014)(18002099003)(56012099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?2OMz4e0RV01DqxhT2QPzwWoFkt/IDgkUqzZ8yyHdR4fSao55Hih0pYzQik1l?= =?us-ascii?Q?KrAQ+Ciw2zZ6Xu0dvvlkIUmDKQDDxscK2Nn0vEak80kniI0NWU56NezGwM1X?= =?us-ascii?Q?30caM3fhgcb77tnVzY9uyJ0Bm0/+ghDAhkHBFrZi+c10W1GF2mPBqbgI5erj?= =?us-ascii?Q?Bm18izdQhZGs1MRipoTUCOq5pB7wdj/cQ2iUs9gL0BwJl1/1re7VOTTMEr/e?= =?us-ascii?Q?3tMmX6vg1ZKvYbguigoQN799Wr+D9CbtXKkXiLAmZdzA7DdPCuwodJMlkZlo?= =?us-ascii?Q?i2Kp2TMV+GZxWv+B4XgwhoS7bhGYa6vN1czrA/PqMihHXnYMCEFOOatbZx8t?= =?us-ascii?Q?zGioZ85R2PsDY+ZmfQVJxe6ah8IBDhMDzQ2fxWv4oEmcCwOWQsNsXHdD2HWZ?= =?us-ascii?Q?OV082vrEfmp6w71byoqdDIAqbyur30FMMPKKykzIEIw2fuCWFHht146ovkQE?= =?us-ascii?Q?fLVSfLTthnfjQdNLH5z+rXXJpX5T5GdEGkRLua7OyQooRw8tdmej63U+8HuP?= =?us-ascii?Q?EbVL9HjsgNlz81r29tNo3U0ughlUboe+tC4YNHtDyKebsaoVpiMK+zT4xcXs?= =?us-ascii?Q?Mbx2+368QobtE0M9OW2hR+LrrOWICtc+Cbnmyn14dSEnGKruOzJQPOtHO+bc?= =?us-ascii?Q?7hIo5WJioug15JBOzXpWNfX2i4lE8hAfWrKT5BAOnGnvT8x9AR9plQYo7DNG?= =?us-ascii?Q?7ia3fIMIUeG4BoiqhkSNJQr11GsLqR1JpJjOkYHnNycovrwymDptGyzhKOxp?= =?us-ascii?Q?sffn3GYPcwOhoJQuLY/+YLV3LdQCN+i1B8lDRxcaRLBg7BTpBsNFYyUER62L?= =?us-ascii?Q?EcmYS+WYhprQl2UTJLtWdlURYnXXfTU2RBVATKuV/BgMmaH2AKZEt2//jmAo?= =?us-ascii?Q?odTlT2Ez8BOiwZlw3thAyd347xq1mVhYltQ9i5jKLaJHmk8OQxMfOsBMzSiO?= =?us-ascii?Q?+oZdsHg3AX+h8lU419XT66VOGOdRUt9il7cfNCOWOVgbssG4ECV77L2Nyufv?= =?us-ascii?Q?/7FgVnoU6GWU+H0Eo04pEBKjBfrtHbv9GDdpV/Ie0safjhIrh6YXDpvKSbjF?= =?us-ascii?Q?IgdPxuXuCEilj339/1n8BQLK3NihAc5FmLIVTYqLwU/hkfjbWQQzG/AHeUXR?= =?us-ascii?Q?S53qMnjGVi8dtO6xvpRx7lK9ZsC2I9AcyuJxr3Wz2+E0sxnPPZIYxyU5gBSK?= =?us-ascii?Q?moJGrVtSpFPluT9bp0VZwQgeKYJKtC4l0bfb3RH48bt+3JJnONnhi06pkZqg?= =?us-ascii?Q?jo49QakiAjRt/nVzg/vkT+NWlvPuxYqnj/iObHKpaB3cgVPsQxD2+ktvm1Uo?= =?us-ascii?Q?euzZ75jPSbwyeajLmcRDdnljTNxDqYO9rOilGF1M+SzL9+Qwgtrsa9Ek/Ajc?= =?us-ascii?Q?/Ln7zzrJH3SilSVV+9wMSDu/bmt6Bs6pR+mPSVjP9PsmIR87JR2LIPBeZ7uF?= =?us-ascii?Q?7FskdqUSbQHTx2fJQovv47WSC4VkADaTvXlQ0r7Hxq6KG67Ty1scJjDK4/+7?= =?us-ascii?Q?UZjO8vQoO/H54lYRxTzsvxHdIxMGBxz/k/u9lB9ExieV28Zy8kmIHnJN+wRj?= =?us-ascii?Q?W4mYBKtrMfZfmSJgx7CEfk4F1F9p2NZZMov9oTF7LKqr7Lq6Rlf69j95SkNP?= =?us-ascii?Q?si4NHNZ9x68H+1Rlw2vlgMgGoI/2BH5rLry2RRHZ02/XK4A2MZUyzwqu31lA?= =?us-ascii?Q?5teOFT3DzOd8TATqbjivMbEoYsZmxiw6iDYIcxI0506Pq1GdPwrp68fn6mBD?= =?us-ascii?Q?ucANrjASNM0tRsifZfLR0AZrYlqoEQ4=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: a5fb2972-2957-47bc-2747-08dea887b6a3 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 May 2026 20:16:37.2633 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: /RUeuJL4rkh12ez+3dADuL7MOaPPlgI0+VOgY2IdiwXHaRSdv9XP8eLUJBCSuHohtwc5Ipq+2wEboyJH4n627Cn9ziI+SZ3q5dvYCpK8LJI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PPF9315CC4EE X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 1/2] libcurl: Version bump. 8.19.0 -> 8.20.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Mostly bugfixes. https://curl.se/ch/8.20.0.html Plugs CVEs: CVE-2026-7168: cross-proxy Digest auth state leak CVE-2026-7009: OCSP stapling bypass with Apple SecTrust CVE-2026-6429: netrc credential leak with reused proxy connection CVE-2026-6276: stale custom cookie host causes cookie leak CVE-2026-6253: proxy credentials leak over redirect-to proxy CVE-2026-5773: wrong reuse of SMB connection CVE-2026-5545: wrong reuse of HTTP Negotiate connection CVE-2026-4873: connection reuse ignores TLS requirement * Adjust options. Signed-off-by: Christian Melki --- rules/libcurl.make | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/rules/libcurl.make b/rules/libcurl.make index d15ea064f..9a05e7deb 100644 --- a/rules/libcurl.make +++ b/rules/libcurl.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl # # Paths and names # -LIBCURL_VERSION := 8.19.0 -LIBCURL_MD5 := d5d3581ba4b4df1140a26a6efcf13e61 +LIBCURL_VERSION := 8.20.0 +LIBCURL_MD5 := b91d9edf299e693ced85db203206e1d4 LIBCURL := curl-$(LIBCURL_VERSION) LIBCURL_SUFFIX := tar.xz LIBCURL_URL := https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) @@ -122,7 +122,6 @@ LIBCURL_CONF_OPT := \ --without-libgsasl \ --$(call ptx/wwo, PTXCONF_LIBCURL_LIBSSH2)-libssh2 \ --without-libssh \ - --without-librtmp \ --without-winidn \ --without-apple-idn \ --without-libidn2 \ -- 2.43.0