linux/poky.git/meta/recipes-support/curl, branch styhead

curl: patch CVE-2024-9681

2024-12-17T20:58:11+00:00

Picked commit [1] per solution described in [2]. [1] https://github.com/curl/curl/commit/a94973805df96269bf [2] https://curl.se/docs/CVE-2024-9681.html (From OE-Core rev: 19663c559b72a0d14ddd0792be325284a6e16edc) (From OE-Core rev: c8282f5f79a38be0672c68c9e8f11bc072b77b56) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

curl: Ignore CVE-2024-32928

2024-08-26T09:39:34+00:00

This CVE affects google cloud services that utilize libcurl wrongly. (From OE-Core rev: 27ac7879711e7119b4ec8b190b0a9da5b3ede269) Signed-off-by: Simone Weiß Signed-off-by: Richard Purdie

curl: Update to 8.9.1

2024-08-09T21:33:38+00:00

This update contains minor features, bugfixes, and addresses several CVEs: * https://curl.se/docs/CVE-2024-6197.html * https://curl.se/docs/CVE-2024-6874.html * https://curl.se/docs/CVE-2024-7264.html Full relese notes available at https://curl.se/ch/8.9.1.html Backport a patch to fix a SIGPIPE issue found shortly after release: https://curl.se/mail/distros-2024-08/0002.html (From OE-Core rev: ff607f50f1e15ca713048bba83ca15d1e4e08b6a) Signed-off-by: Robert Joslyn Signed-off-by: Richard Purdie

curl: Reenable auth support for native and nativesdk

2024-08-08T13:28:49+00:00

148de08220c0ad390ec533e452cbaad7a9338204 adapted the recipe to accomodate the newly introduced configure options for the various authentication schemes supported by curl. However, support for these was not added for the -native and -nativesdk variants of the recipe. Fix this and introduce a PACKAGECONFIG variable for the flags common to all recipe variants to avoid such regressions in the future. (From OE-Core rev: 5b91a092216fa29c944dd1f2d4cc237cac47929e) Signed-off-by: Philip Lorenz Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

curl: rewrite ptest installation

2024-06-13T08:11:17+00:00

The latest libtool upgrade appears to have resulted in intermediate files containing build paths. This wouldn't normally be a problem but the curl-ptest package is populated by copying ${B}/tests/ which includes all of the intermediate objects, so this causes buildpath warnings. Rewrite the ptest installation to install just the pieces we need: the test harness, utility scripts, and the test data. We do not need the libcurl unit tests nor the HTTP server tests, as we don't run those. Remove all of the explicitly disabled tests, as many of these were for tests that run curl-config or scan the source code, neither of which are available at ptest time. Instead use keyword exclusions to skip them. Tell the test runner to use the system curl instead of symlinking in the binary. Don't copy curl-config, skipping these minor tests is acceptable. Remove the RDEPENDS on bash, nothing needs this now we're not shipping a build tree. (From OE-Core rev: ace380501d3ef62a9e94e2bd4e880cbfaddac02c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

curl: Update to 8.8.0

2024-05-30T08:04:14+00:00

Remove backported patch that is upsteam in this version. Disable test 1481 since it requires --libcurl option that is disabled by default. Remove --disable-ntlm-wb option since support for ntlm_wb was removed in this version (From OE-Core rev: f193e89cd957f0f0f7d8e9450b59061bf2e800c7) Signed-off-by: Robert Joslyn Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

curl: skip FTP tests in run-ptest

2024-05-22T09:21:27+00:00

It looks like something related to FTP in curl, be it the protocol itself or the harness, is unstable under load. We've been seeing random failures in automated QA, and Debian does too. Until this issue is resolved, disable all of the FTP tests on the hope that this is the underlying common factor. (From OE-Core rev: 28035987fad5a673e35b346e043e66d04f64ef5d) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-21T11:08:04+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. (From OE-Core rev: 1f18b9a512800860d5153d89eb82b56388efad6f) Signed-off-by: Richard Purdie

curl: locale-base-en-us isn't glibc-specific

2024-05-13T14:42:27+00:00

The musl-locales package provides this too, so we can depend without a libc override. (From OE-Core rev: c8f1d51f4eb6df6c041707d38f60549d13ddab7f) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

curl: Backport patch to fix buildtools issues

2024-04-18T10:58:21+00:00

bitbake-selftest was failing on a github url on hosts using buildtools. The issue was tracked down to the curl upgrade 8.6.0 -> 8.7.1. Whilst there is a fix in upstream git to workaround the issue in this version, backport the fix from curl upstream to ensure there are no other related issues to the bug. (From OE-Core rev: e956f1116deb93c0d77238a1ebde091b9f1cbc77) Signed-off-by: Richard Purdie