[ptxdist] [PATCH 1/2] libcurl: Version bump. 8.19.0 -> 8.20.0

[ptxdist] [PATCH 1/2] libcurl: Version bump. 8.19.0 -> 8.20.0

[Christian Melki]

Mostly bugfixes.
https://curl.se/ch/8.20.0.html

Plugs CVEs:
CVE-2026-7168: cross-proxy Digest auth state leak
CVE-2026-7009: OCSP stapling bypass with Apple SecTrust
CVE-2026-6429: netrc credential leak with reused proxy connection
CVE-2026-6276: stale custom cookie host causes cookie leak
CVE-2026-6253: proxy credentials leak over redirect-to proxy
CVE-2026-5773: wrong reuse of SMB connection
CVE-2026-5545: wrong reuse of HTTP Negotiate connection
CVE-2026-4873: connection reuse ignores TLS requirement

* Adjust options.

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 rules/libcurl.make | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/rules/libcurl.make b/rules/libcurl.make
index d15ea064f..9a05e7deb 100644
--- a/rules/libcurl.make
+++ b/rules/libcurl.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl
 #
 # Paths and names
 #
-LIBCURL_VERSION	:= 8.19.0
-LIBCURL_MD5	:= d5d3581ba4b4df1140a26a6efcf13e61
+LIBCURL_VERSION	:= 8.20.0
+LIBCURL_MD5	:= b91d9edf299e693ced85db203206e1d4
 LIBCURL		:= curl-$(LIBCURL_VERSION)
 LIBCURL_SUFFIX	:= tar.xz
 LIBCURL_URL	:= https://curl.se/download/$(LIBCURL).$(LIBCURL_SUFFIX)
@@ -122,7 +122,6 @@ LIBCURL_CONF_OPT	:= \
 	--without-libgsasl \
 	--$(call ptx/wwo, PTXCONF_LIBCURL_LIBSSH2)-libssh2 \
 	--without-libssh \
-	--without-librtmp \
 	--without-winidn \
 	--without-apple-idn \
 	--without-libidn2 \
-- 
2.43.0

[ptxdist] [PATCH 2/2] host-libcurl: Follow target libcurl bump 8.19.0 -> 8.20.0

[Christian Melki]

* Adjust options.

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 rules/host-libcurl.make | 1 -
 1 file changed, 1 deletion(-)

diff --git a/rules/host-libcurl.make b/rules/host-libcurl.make
index 82ea79077..b25e3d329 100644
--- a/rules/host-libcurl.make
+++ b/rules/host-libcurl.make
@@ -104,7 +104,6 @@ HOST_LIBCURL_CONF_OPT	:= \
 	--without-libgsasl \
 	--without-libssh2 \
 	--without-libssh \
-	--without-librtmp \
 	--without-winidn \
 	--without-apple-idn \
 	--without-libidn2 \
-- 
2.43.0