[PATCH] curl: Update to 8.9.1

[PATCH] curl: Update to 8.9.1

[robert.joslyn]

From: Robert Joslyn <robert.joslyn@redrectangle.org>

This update contains minor features, bugfixes, and addresses several CVEs:
* https://curl.se/docs/CVE-2024-6197.html
* https://curl.se/docs/CVE-2024-6874.html
* https://curl.se/docs/CVE-2024-7264.html

Full relese notes available at https://curl.se/ch/8.9.1.html

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
---
 meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} (98%)

diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb
similarity index 98%
rename from meta/recipes-support/curl/curl_8.8.0.bb
rename to meta/recipes-support/curl/curl_8.9.1.bb
index 2b058e4e82..3abe1596a0 100644
--- a/meta/recipes-support/curl/curl_8.8.0.bb
+++ b/meta/recipes-support/curl/curl_8.9.1.bb
@@ -15,7 +15,7 @@ SRC_URI = " \
     file://disable-tests \
     file://no-test-timeout.patch \
 "
-SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400"
+SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5"
 
 # Curl has used many names over the years...
 CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"
-- 
2.44.2

Re: [OE-core] [PATCH] curl: Update to 8.9.1

[Ross Burton]

There’s a known regression in this release, can you also backport this commit:

https://github.com/curl/curl/commit/3eec5afbd0b6377eca893c392569b2faf094d970

(as per https://curl.se/mail/distros-2024-08/0002.html)

Ross

> On 4 Aug 2024, at 02:44, Robert Joslyn via lists.openembedded.org <robert.joslyn=redrectangle.org@lists.openembedded.org> wrote:
> 
> From: Robert Joslyn <robert.joslyn@redrectangle.org>
> 
> This update contains minor features, bugfixes, and addresses several CVEs:
> * https://curl.se/docs/CVE-2024-6197.html
> * https://curl.se/docs/CVE-2024-6874.html
> * https://curl.se/docs/CVE-2024-7264.html
> 
> Full relese notes available at https://curl.se/ch/8.9.1.html
> 
> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
> ---
> meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> rename meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} (98%)
> 
> diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb
> similarity index 98%
> rename from meta/recipes-support/curl/curl_8.8.0.bb
> rename to meta/recipes-support/curl/curl_8.9.1.bb
> index 2b058e4e82..3abe1596a0 100644
> --- a/meta/recipes-support/curl/curl_8.8.0.bb
> +++ b/meta/recipes-support/curl/curl_8.9.1.bb
> @@ -15,7 +15,7 @@ SRC_URI = " \
>     file://disable-tests \
>     file://no-test-timeout.patch \
> "
> -SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400"
> +SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5"
> 
> # Curl has used many names over the years...
> CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"
> -- 
> 2.44.2
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#202940): https://lists.openembedded.org/g/openembedded-core/message/202940
> Mute This Topic: https://lists.openembedded.org/mt/107710560/6875888
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ross.burton@arm.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 

Re: [OE-core] [PATCH] curl: Update to 8.9.1

[Robert Joslyn]

On 8/5/24 4:11 AM, Ross Burton wrote:
> There’s a known regression in this release, can you also backport this commit:
>
> https://github.com/curl/curl/commit/3eec5afbd0b6377eca893c392569b2faf094d970
>
> (as per https://curl.se/mail/distros-2024-08/0002.html)
>
> Ross

Ah, sure thing. I'll send a v2.

Thanks,

Robert


>
>> On 4 Aug 2024, at 02:44, Robert Joslyn via lists.openembedded.org <robert.joslyn=redrectangle.org@lists.openembedded.org> wrote:
>>
>> From: Robert Joslyn <robert.joslyn@redrectangle.org>
>>
>> This update contains minor features, bugfixes, and addresses several CVEs:
>> * https://curl.se/docs/CVE-2024-6197.html
>> * https://curl.se/docs/CVE-2024-6874.html
>> * https://curl.se/docs/CVE-2024-7264.html
>>
>> Full relese notes available at https://curl.se/ch/8.9.1.html
>>
>> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
>> ---
>> meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>> rename meta/recipes-support/curl/{curl_8.8.0.bb => curl_8.9.1.bb} (98%)
>>
>> diff --git a/meta/recipes-support/curl/curl_8.8.0.bb b/meta/recipes-support/curl/curl_8.9.1.bb
>> similarity index 98%
>> rename from meta/recipes-support/curl/curl_8.8.0.bb
>> rename to meta/recipes-support/curl/curl_8.9.1.bb
>> index 2b058e4e82..3abe1596a0 100644
>> --- a/meta/recipes-support/curl/curl_8.8.0.bb
>> +++ b/meta/recipes-support/curl/curl_8.9.1.bb
>> @@ -15,7 +15,7 @@ SRC_URI = " \
>>      file://disable-tests \
>>      file://no-test-timeout.patch \
>> "
>> -SRC_URI[sha256sum] = "0f58bb95fc330c8a46eeb3df5701b0d90c9d9bfcc42bd1cd08791d12551d4400"
>> +SRC_URI[sha256sum] = "f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5"
>>
>> # Curl has used many names over the years...
>> CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl"
>> -- 
>> 2.44.2
>>
>>
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#202940): https://lists.openembedded.org/g/openembedded-core/message/202940
>> Mute This Topic: https://lists.openembedded.org/mt/107710560/6875888
>> Group Owner: openembedded-core+owner@lists.openembedded.org
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ross.burton@arm.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>>