| Message ID | 20240804014447.2463258-1-robert.joslyn@redrectangle.org |
|---|---|
| State | Accepted, archived |
| Commit | ff607f50f1e15ca713048bba83ca15d1e4e08b6a |
| Headers | show |
| Series | curl: Update to 8.9.1 | expand |
There’s a known regression in this release, can you also backport this commit: https://github.com/curl/curl/commit/3eec5afbd0b6377eca893c392569b2faf094d970 (as per https://curl.se/mail/distros-2024-08/0002.html) Ross > On 4 Aug 2024, at 02:44, Robert Joslyn via lists.openembedded.org <robert.joslyn=redrectangle.org@lists.openembedded.org> wrote: > > From: Robert Joslyn <robert.joslyn@redrectangle.org> > > This update contains minor features, bugfixes, and addresses several CVEs: > * https://curl.se/docs/CVE-2024-6197.html > * https://curl.se/docs/CVE-2024-6874.html > * https://curl.se/docs/CVE-2024-7264.html > > Full relese notes available at https://curl.se/ch/8.9.1.html > > Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> > --- > meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > rename meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} (98%) > > diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb > similarity index 98% > rename from meta/recipes-support/curl/curl_8.8.0.bb > rename to meta/recipes-support/curl/curl_8.9.1.bb > index 2b058e4e82..3abe1596a0 100644 > --- a/meta/recipes-support/curl/curl_8.8.0.bb > +++ b/meta/recipes-support/curl/curl_8.9.1.bb > @@ -15,7 +15,7 @@ SRC_URI = " \ > file://disable-tests \ > file://no-test-timeout.patch \ > " > -SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400" > +SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5" > > # Curl has used many names over the years... > CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" > -- > 2.44.2 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#202940): https://lists.openembedded.org/g/openembedded-core/message/202940 > Mute This Topic: https://lists.openembedded.org/mt/107710560/6875888 > Group Owner: openembedded-core+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ross.burton@arm.com] > -=-=-=-=-=-=-=-=-=-=-=- >
On 8/5/24 4:11 AM, Ross Burton wrote: > There’s a known regression in this release, can you also backport this commit: > > https://github.com/curl/curl/commit/3eec5afbd0b6377eca893c392569b2faf094d970 > > (as per https://curl.se/mail/distros-2024-08/0002.html) > > Ross Ah, sure thing. I'll send a v2. Thanks, Robert > >> On 4 Aug 2024, at 02:44, Robert Joslyn via lists.openembedded.org <robert.joslyn=redrectangle.org@lists.openembedded.org> wrote: >> >> From: Robert Joslyn <robert.joslyn@redrectangle.org> >> >> This update contains minor features, bugfixes, and addresses several CVEs: >> * https://curl.se/docs/CVE-2024-6197.html >> * https://curl.se/docs/CVE-2024-6874.html >> * https://curl.se/docs/CVE-2024-7264.html >> >> Full relese notes available at https://curl.se/ch/8.9.1.html >> >> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> >> --- >> meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} | 2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) >> rename meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} (98%) >> >> diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb >> similarity index 98% >> rename from meta/recipes-support/curl/curl_8.8.0.bb >> rename to meta/recipes-support/curl/curl_8.9.1.bb >> index 2b058e4e82..3abe1596a0 100644 >> --- a/meta/recipes-support/curl/curl_8.8.0.bb >> +++ b/meta/recipes-support/curl/curl_8.9.1.bb >> @@ -15,7 +15,7 @@ SRC_URI = " \ >> file://disable-tests \ >> file://no-test-timeout.patch \ >> " >> -SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400" >> +SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5" >> >> # Curl has used many names over the years... >> CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" >> -- >> 2.44.2 >> >> >> -=-=-=-=-=-=-=-=-=-=-=- >> Links: You receive all messages sent to this group. >> View/Reply Online (#202940): https://lists.openembedded.org/g/openembedded-core/message/202940 >> Mute This Topic: https://lists.openembedded.org/mt/107710560/6875888 >> Group Owner: openembedded-core+owner@lists.openembedded.org >> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ross.burton@arm.com] >> -=-=-=-=-=-=-=-=-=-=-=- >>
diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb similarity index 98% rename from meta/recipes-support/curl/curl_8.8.0.bb rename to meta/recipes-support/curl/curl_8.9.1.bb index 2b058e4e82..3abe1596a0 100644 --- a/meta/recipes-support/curl/curl_8.8.0.bb +++ b/meta/recipes-support/curl/curl_8.9.1.bb @@ -15,7 +15,7 @@ SRC_URI = " \ file://disable-tests \ file://no-test-timeout.patch \ " -SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400" +SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5" # Curl has used many names over the years... CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"