Skip to content

net-misc/curl: Update curl to 8.23.0 - #4326

Merged
sayanchowdhury merged 3 commits into
mainfrom
sayan/update-curl-8.23.0
Oct 20, 2026
Merged

sayanchowdhury merged 3 commits into
mainfrom
sayan/update-curl-8.23.0

Conversation

@sayanchowdhury

Copy link
Copy Markdown
Member

This updates curl to 8.23.0 to address security issues.

Fixes flatcar/Flatcar#2450

Testing done

CI passed https://jenkins.flatcar.org/job/container/job/packages_all_arches/868/cldsv/

[Describe the testing you have done before submitting this PR. Please include both the commands you issued as well as the output you got.]

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

It's from Gentoo commit 00bf6829807d0dd6337c518775120b07364abdd7.

Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
@sayanchowdhury
sayanchowdhury requested a review from a team as a code owner October 20, 2026 13:13
Copilot AI balanced review requested due to automatic review settings October 20, 2026 13:13

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The focused package update has consistent version selection and changelog entries, with no identified blocking issues.

No open issues 🎉

What changed in this PR

Updates Flatcar’s curl package to 8.23.0 to address security issues.

Changes:

  • Adds the 8.23.0 ebuild, source checksums, and profile acceptance.
  • Removes the obsolete SMB configure option from the live ebuild and stabilizes 8.22.0 keywords.
  • Adds update and security changelog entries.
File Description
sdk_container/​src/​third_party/​portage-stable/​net-misc/​curl/​Manifest Adds 8.23.0 archive and signature checksums.
sdk_container/​src/​third_party/​portage-stable/​net-misc/​curl/​curl-9999.ebuild Removes the obsolete SMB configure option.
sdk_container/​src/​third_party/​portage-stable/​net-misc/​curl/​curl-8.23.0.ebuild Adds the new release recipe.
sdk_container/​src/​third_party/​portage-stable/​net-misc/​curl/​curl-8.22.0.ebuild Stabilizes architecture keywords.
sdk_container/​src/​third_party/​coreos-overlay/​profiles/​coreos/​base/​package.accept_keywords Accepts curl 8.23.0.
changelog/​updates/​2026-10-21-curl-8.23.0.md Records the base and developer image update.
changelog/​security/​2026-10-21-curl-8.23.0.md Lists addressed security vulnerabilities.

Review effort: Balanced

@sayanchowdhury
sayanchowdhury merged commit 1947502 into main Oct 20, 2026
3 of 4 checks passed
@sayanchowdhury
sayanchowdhury deleted the sayan/update-curl-8.23.0 branch October 20, 2026 13:17
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>

This branch is waiting to be deployed

1 waiting deployment
development — b0658843 Waiting Oct 20, 2026 by sayanchowdhury via Wait for approval #6004
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

update: net-misc/curl

4 participants