From patchwork Thu Oct 15 05:54:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 100886 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 307D3CC6B38 for ; Thu, 15 Oct 2026 05:55:11 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33356.1792043704141798213 for ; Wed, 14 Oct 2026 22:55:05 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm2 header.b=OQIUym/U; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-202610150554590612f9b8b6000207b4-83cwai@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 202610150554590612f9b8b6000207b4 for ; Thu, 15 Oct 2026 07:55:00 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=EaCZw6+lbYkxo56vDt/m8Jj99hsH5XJRugZzuS8fm5k=; b=OQIUym/UVujhpqxSa/aPITVuRNx3GFA2MI+FFU+TGuOKcgbrrU0w75m46lz6iX1VlTi9f8 /ybz+7AWejMvvRkPZXR0xd7RWNhLxFuEnM48bZ9UWb9caVgT5rtj5jJohZ0I8Zmkzho3dU5W 6ygBFBytdUVLYWJLVLKuUvvqCN+VYWlQXtqI0aP1y7q7eBC/l6nyvpPkqbMhEa1+GzvqQ9mh g2PxZQJirQD7KE0yzPZfsE9wNkByaeePyV9Fp97ggWGyu4TJ299NYAR/Rhx0OD+I4EtMdm/6 iOMoR9hwYW0QcfGmMEb2vY/0Q4MtAM6SuaAkLZ6w1CAfN99D/mNcXoWg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: Peter Marko Subject: [PATCH v2] curl: upgrade 8.22.0 -> 8.23.0 Date: Thu, 15 Oct 2026 07:54:47 +0200 Message-ID: <20261015055447.3624-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 15 Oct 2026 05:55:11 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247866 From: Peter Marko Solves 21 CVEs: CVE-2026-107929 CVE-2026-107928 CVE-2026-94266 CVE-2026-94265 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-86410 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865 CVE-2026-87866 Dropped smb package config as support for SMB was removed. Release info [1] (changes only, bugfix list is too long): * lib: CURL_GLOBAL_WIN32 -> CURL_GLOBAL_WINSOCK * SMB: drop support * tool_cb_wrt: inject the no-clobber number before the extension * tool_cb_wrt: try up to .9999 when no-clobbering [1] https://curl.se/ch/8.23.0.html Signed-off-by: Peter Marko --- v2: actually remove smb config mentioned in commit message meta/recipes-support/curl/{curl_8.22.0.bb => curl_8.23.0.bb} | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) rename meta/recipes-support/curl/{curl_8.22.0.bb => curl_8.23.0.bb} (98%) diff --git a/meta/recipes-support/curl/curl_8.22.0.bb b/meta/recipes-support/curl/curl_8.23.0.bb similarity index 98% rename from meta/recipes-support/curl/curl_8.22.0.bb rename to meta/recipes-support/curl/curl_8.23.0.bb index 96f889165e..ad0ad408a1 100644 --- a/meta/recipes-support/curl/curl_8.22.0.bb +++ b/meta/recipes-support/curl/curl_8.23.0.bb @@ -20,7 +20,7 @@ SRC_URI:append:class-nativesdk = " \ file://environment.d-curl.sh \ " -SRC_URI[sha256sum] = "f7ef3ae8a22e521f289803fe93543eb64c329b58aa73a9e224dfd915a2a5f4f7" +SRC_URI[sha256sum] = "8dadd7d2536a314f982ad05a651b713f426bf7d02cc2c76cffb9796f2218e6c5" # Curl has used many names over the years... CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" @@ -67,7 +67,6 @@ PACKAGECONFIG[pop3] = "--enable-pop3,--disable-pop3," PACKAGECONFIG[proxy] = "--enable-proxy,--disable-proxy," PACKAGECONFIG[rtsp] = "--enable-rtsp,--disable-rtsp," PACKAGECONFIG[schannel] = "--with-schannel,--without-schannel," -PACKAGECONFIG[smb] = "--enable-smb,--disable-smb," PACKAGECONFIG[smtp] = "--enable-smtp,--disable-smtp," PACKAGECONFIG[telnet] = "--enable-telnet,--disable-telnet," PACKAGECONFIG[tftp] = "--enable-tftp,--disable-tftp,"