diff mbox series

[v2] curl: upgrade 8.22.0 -> 8.23.0

Message ID 20261015055447.3624-1-peter.marko@siemens.com
State New
Headers show
Series [v2] curl: upgrade 8.22.0 -> 8.23.0 | expand

Commit Message

Peter Marko Oct. 15, 2026, 5:54 a.m. UTC
From: Peter Marko <peter.marko@siemens.com>

Solves 21 CVEs:
  CVE-2026-107929 CVE-2026-107928 CVE-2026-94266 CVE-2026-94265
  CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389
  CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-86410
  CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415
  CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865
  CVE-2026-87866

Dropped smb package config as support for SMB was removed.

Release info [1] (changes only, bugfix list is too long):
* lib: CURL_GLOBAL_WIN32 -> CURL_GLOBAL_WINSOCK
* SMB: drop support
* tool_cb_wrt: inject the no-clobber number before the extension
* tool_cb_wrt: try up to .9999 when no-clobbering

[1] https://curl.se/ch/8.23.0.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
v2: actually remove smb config mentioned in commit message

 meta/recipes-support/curl/{curl_8.22.0.bb => curl_8.23.0.bb} | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
 rename meta/recipes-support/curl/{curl_8.22.0.bb => curl_8.23.0.bb} (98%)
diff mbox series

Patch

diff --git a/meta/recipes-support/curl/curl_8.22.0.bb b/meta/recipes-support/curl/curl_8.23.0.bb
similarity index 98%
rename from meta/recipes-support/curl/curl_8.22.0.bb
rename to meta/recipes-support/curl/curl_8.23.0.bb
index 96f889165e..ad0ad408a1 100644
--- a/meta/recipes-support/curl/curl_8.22.0.bb
+++ b/meta/recipes-support/curl/curl_8.23.0.bb
@@ -20,7 +20,7 @@  SRC_URI:append:class-nativesdk = " \
     file://environment.d-curl.sh \
 "
 
-SRC_URI[sha256sum] = "f7ef3ae8a22e521f289803fe93543eb64c329b58aa73a9e224dfd915a2a5f4f7"
+SRC_URI[sha256sum] = "8dadd7d2536a314f982ad05a651b713f426bf7d02cc2c76cffb9796f2218e6c5"
 
 # Curl has used many names over the years...
 CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"
@@ -67,7 +67,6 @@  PACKAGECONFIG[pop3] = "--enable-pop3,--disable-pop3,"
 PACKAGECONFIG[proxy] = "--enable-proxy,--disable-proxy,"
 PACKAGECONFIG[rtsp] = "--enable-rtsp,--disable-rtsp,"
 PACKAGECONFIG[schannel] = "--with-schannel,--without-schannel,"
-PACKAGECONFIG[smb] = "--enable-smb,--disable-smb,"
 PACKAGECONFIG[smtp] = "--enable-smtp,--disable-smtp,"
 PACKAGECONFIG[telnet] = "--enable-telnet,--disable-telnet,"
 PACKAGECONFIG[tftp] = "--enable-tftp,--disable-tftp,"