diff mbox series

curl: upgrade 8.16.0 -> 8.17.0

Message ID 20251106200710.3082982-1-peter.marko@siemens.com
State New
Headers show
Series curl: upgrade 8.16.0 -> 8.17.0 | expand

Commit Message

Peter Marko Nov. 6, 2025, 8:07 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Handles CVE-2025-10966 per
https://curl.se/docs/CVE-2025-10966.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-support/curl/curl/no-test-timeout.patch         | 2 +-
 meta/recipes-support/curl/{curl_8.16.0.bb => curl_8.17.0.bb} | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-support/curl/{curl_8.16.0.bb => curl_8.17.0.bb} (98%)
diff mbox series

Patch

diff --git a/meta/recipes-support/curl/curl/no-test-timeout.patch b/meta/recipes-support/curl/curl/no-test-timeout.patch
index 5b901a6fe9e..34e46fed6dd 100644
--- a/meta/recipes-support/curl/curl/no-test-timeout.patch
+++ b/meta/recipes-support/curl/curl/no-test-timeout.patch
@@ -14,7 +14,7 @@  diff --git a/tests/servers.pm b/tests/servers.pm
 index d4472d5..9999938 100644
 --- a/tests/servers.pm
 +++ b/tests/servers.pm
-@@ -124,7 +124,7 @@ my $sshdverstr;  # for socks server, ssh daemon version string
+@@ -125,7 +125,7 @@ my $sshdverstr;  # for socks server, ssh daemon version string
  my $sshderror;   # for socks server, ssh daemon version error
  my %doesntrun;    # servers that don't work, identified by pidfile
  my %PORT = (nolisten => 47); # port we use for a local non-listening service
diff --git a/meta/recipes-support/curl/curl_8.16.0.bb b/meta/recipes-support/curl/curl_8.17.0.bb
similarity index 98%
rename from meta/recipes-support/curl/curl_8.16.0.bb
rename to meta/recipes-support/curl/curl_8.17.0.bb
index c226670357d..32585070ebd 100644
--- a/meta/recipes-support/curl/curl_8.16.0.bb
+++ b/meta/recipes-support/curl/curl_8.17.0.bb
@@ -20,7 +20,7 @@  SRC_URI:append:class-nativesdk = " \
            file://environment.d-curl.sh \
 "
 
-SRC_URI[sha256sum] = "40c8cddbcb6cc6251c03dea423a472a6cea4037be654ba5cf5dec6eb2d22ff1d"
+SRC_URI[sha256sum] = "955f6e729ad6b3566260e8fef68620e76ba3c31acf0a18524416a185acf77992"
 
 # Curl has used many names over the years...
 CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"