From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 27 Apr 2022 12:58:12 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1njfN8-00GvsC-5V for lore@lore.pengutronix.de; Wed, 27 Apr 2022 12:58:12 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1njfN6-0005yC-AF; Wed, 27 Apr 2022 12:58:12 +0200 Received: from mail.thorsis.com ([92.198.35.195]) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1njfMg-0005y3-Sf for ptxdist@pengutronix.de; Wed, 27 Apr 2022 12:57:47 +0200 Date: Wed, 27 Apr 2022 12:57:37 +0200 From: Alexander Dahl To: Christian Melki Message-ID: Mail-Followup-To: Christian Melki , ptxdist@pengutronix.de References: <20220427100919.4176808-1-christian.melki@t2data.com> Content-Disposition: inline In-Reply-To: <20220427100919.4176808-1-christian.melki@t2data.com> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.6 required=4.0 tests=AWL,BAYES_00,SPF_HELO_NONE, SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH] libcurl: Version bump. 7.82.0 -> 7.83.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: ptxdist@pengutronix.de MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Hello Christian, Am Wed, Apr 27, 2022 at 12:09:19PM +0200 schrieb Christian Melki: > The usual bunch of bugfixes. Curl is very active, as always. > https://curl.se/changes.html#7_83_0 > Plugs vulnerabilities: CVE-2022-27776, CVE-2022-27775, CVE-2022-27774 and CVE-2022-22576. > All still in preliminary state @mitre as of writing. > For details about curl security, visit the security page: > https://curl.se/docs/security.html > > * Builds without nss per default. > * msh3 is disabled by not selecting ngtcp2. There's a new option, why not pass --without-msh3 explicitly then? > * lber is disabled by not selecting ldap. No change to previous version, right? > > Signed-off-by: Christian Melki > --- > rules/libcurl.make | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/rules/libcurl.make b/rules/libcurl.make > index 3c99caa47..482aa77ab 100644 > --- a/rules/libcurl.make > +++ b/rules/libcurl.make > @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_LIBCURL) += libcurl > # > # Paths and names > # > -LIBCURL_VERSION := 7.82.0 > -LIBCURL_MD5 := ce05eb61ef7c398feb7dbe23122d0bd9 > +LIBCURL_VERSION := 7.83.0 > +LIBCURL_MD5 := b7924acdea33dedc3150a044789ed0bb > LIBCURL := curl-$(LIBCURL_VERSION) > LIBCURL_SUFFIX := tar.xz > LIBCURL_URL := https://curl.haxx.se/download/$(LIBCURL).$(LIBCURL_SUFFIX) Also missing is the switch for the new experimental headers api. You could add --disable-headers-api to turn it off explicitly. With --disable-headers-api and --without-msh3 added, builds fine with OSELAS.Toolchain-2016.06.1/arm-v5te-linux-gnueabi here, no runtime tests from my side. Greets Alex _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de