The Public Suffix List[1] is a list of domains that people can register
domains under, for example ".com" or ".co.uk".  This is useful because
it means browsers and other HTTP using tools can prevent malicious
web sites from setting privacy-damaging "supercookies".

In the interest of being more secure out of the box, enable libpsl in
target builds of curl.

[1] https://publicsuffix.org

Signed-off-by: Ross Burton <[email protected]>
---
 meta/recipes-support/curl/curl_8.21.0.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-support/curl/curl_8.21.0.bb 
b/meta/recipes-support/curl/curl_8.21.0.bb
index 399b915dee8..e8c024d18a7 100644
--- a/meta/recipes-support/curl/curl_8.21.0.bb
+++ b/meta/recipes-support/curl/curl_8.21.0.bb
@@ -29,7 +29,7 @@ CVE_STATUS[CVE-2024-32928] = "ignored: CURLOPT_SSL_VERIFYPEER 
was disabled on go
 inherit autotools pkgconfig binconfig multilib_header ptest
 
 COMMON_PACKAGECONFIG = "basic-auth bearer-auth digest-auth ipfs negotiate-auth 
openssl proxy threaded-resolver verbose zlib"
-PACKAGECONFIG ??= "${COMMON_PACKAGECONFIG} 
${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)} aws libidn"
+PACKAGECONFIG ??= "${COMMON_PACKAGECONFIG} 
${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)} aws libidn libpsl"
 PACKAGECONFIG:class-native = "${COMMON_PACKAGECONFIG} ipv6"
 PACKAGECONFIG:class-nativesdk = "${COMMON_PACKAGECONFIG} ipv6"
 
-- 
2.43.0

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#241845): 
https://lists.openembedded.org/g/openembedded-core/message/241845
Mute This Topic: https://lists.openembedded.org/mt/120410699/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to