[PA-6145]: Applied Curl Patch CVE-2023-46218

[span786]

Applied Curl Patch CVE-2023-46218 [cookie: lowercase the domain names before PSL checks]

[joshcooper]

If you haven't already, could you try to run vanagon generic builder on a subset of platforms including windows, solaris, aix, mac and linux

[span786]

vanagon-generic-builder pipeline links:

1. agent-runtime-main : Build is failing for solaris-11-sparc because of error (../src/sparc/ffi.c:319:3: error: 'asm' undeclared (first use in this function))
2. agent-runtime-7.x : Build is failing for aix-7.2-ppc because of error (/bin/sh: /opt/pl-build-tools/bin/gcc: not found)

[joshcooper]

@span786 I think you're mixing BUILD_TARGETS from agent-runtime-7.x and agent-runtime-main Unfortunately, they're similar, but not the same, so be sure you're copying the BUILD_TARGETS from the correct agent-runtime-* Init job.

7.x Init
main Init

For Solaris 11 SPARC, we native compile in main, but cross compile in 7.x. So when building agent-runtime-main, you'll want to use this solaris-11-native-sparc, which refers to this platform definintion. This is necessary, because we needed newer gcc and build tools to compile ruby 3.2, etc.

For AIX, agent-runtime-7.x builds on AIX 7.1 while agent-runtime-main builds on AIX 7.2. This is because AIX 7.1 is technically EOL and so we didn't want to start off building puppet 8, ruby 3.2, etc on an EOL platform. Note AIX is like Windows, we build on the oldest supported platform, but install on all supported platforms like 7.2 and 7.3.