[PATCH] curl: upgrade to 7.50.1

[PATCH] curl: upgrade to 7.50.1

[Ross Burton]

Signed-off-by: Ross Burton <ross.burton@intel.com>
---
 meta/recipes-support/curl/{curl_7.50.0.bb => curl_7.50.1.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-support/curl/{curl_7.50.0.bb => curl_7.50.1.bb} (94%)

diff --git a/meta/recipes-support/curl/curl_7.50.0.bb b/meta/recipes-support/curl/curl_7.50.1.bb
similarity index 94%
rename from meta/recipes-support/curl/curl_7.50.0.bb
rename to meta/recipes-support/curl/curl_7.50.1.bb
index 6a5be25..a21419a 100644
--- a/meta/recipes-support/curl/curl_7.50.0.bb
+++ b/meta/recipes-support/curl/curl_7.50.1.bb
@@ -14,8 +14,8 @@ SRC_URI = "http://curl.haxx.se/download/curl-${PV}.tar.bz2 \
 #
 SRC_URI += " file://configure_ac.patch"
 
-SRC_URI[md5sum] = "9e463ff8fdc1b5daa81c850c514980ec"
-SRC_URI[sha256sum] = "608dfe2db77f48db792c387e7791aca55a25f0b42385707ad927164199ecfa9a"
+SRC_URI[md5sum] = "015f6a0217ca6f2c5442ca406476920b"
+SRC_URI[sha256sum] = "3c12c5f54ccaa1d40abc65d672107dcc75d3e1fcb38c267484334280096e5156"
 
 inherit autotools pkgconfig binconfig multilib_header
 
-- 
2.8.1

Re: [PATCH] curl: upgrade to 7.50.1

[Martin Jansa]

[-- Attachment #1: Type: text/plain, Size: 1657 bytes --]

On Fri, Aug 12, 2016 at 11:26:23AM +0100, Ross Burton wrote:
> Signed-off-by: Ross Burton <ross.burton@intel.com>

If the <= is correct, then you might reuse this from Armin's commit:

This fixes 3 CVES:

CVE-2016-5419
CVE-2016-5420
CVE-2016-5421

Affects curl <= 7.50.0

> ---
>  meta/recipes-support/curl/{curl_7.50.0.bb => curl_7.50.1.bb} | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>  rename meta/recipes-support/curl/{curl_7.50.0.bb => curl_7.50.1.bb} (94%)
> 
> diff --git a/meta/recipes-support/curl/curl_7.50.0.bb b/meta/recipes-support/curl/curl_7.50.1.bb
> similarity index 94%
> rename from meta/recipes-support/curl/curl_7.50.0.bb
> rename to meta/recipes-support/curl/curl_7.50.1.bb
> index 6a5be25..a21419a 100644
> --- a/meta/recipes-support/curl/curl_7.50.0.bb
> +++ b/meta/recipes-support/curl/curl_7.50.1.bb
> @@ -14,8 +14,8 @@ SRC_URI = "http://curl.haxx.se/download/curl-${PV}.tar.bz2 \
>  #
>  SRC_URI += " file://configure_ac.patch"
>  
> -SRC_URI[md5sum] = "9e463ff8fdc1b5daa81c850c514980ec"
> -SRC_URI[sha256sum] = "608dfe2db77f48db792c387e7791aca55a25f0b42385707ad927164199ecfa9a"
> +SRC_URI[md5sum] = "015f6a0217ca6f2c5442ca406476920b"
> +SRC_URI[sha256sum] = "3c12c5f54ccaa1d40abc65d672107dcc75d3e1fcb38c267484334280096e5156"
>  
>  inherit autotools pkgconfig binconfig multilib_header
>  
> -- 
> 2.8.1
> 
> -- 
> _______________________________________________
> Openembedded-core mailing list
> Openembedded-core@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core

-- 
Martin 'JaMa' Jansa     jabber: Martin.Jansa@gmail.com

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 188 bytes --]

Re: [PATCH] curl: upgrade to 7.50.1

[Burton, Ross]

[-- Attachment #1: Type: text/plain, Size: 287 bytes --]

On 12 August 2016 at 11:48, Martin Jansa <martin.jansa@gmail.com> wrote:

> If the <= is correct, then you might reuse this from Armin's commit:
>
> This fixes 3 CVES:
>
> CVE-2016-5419
> CVE-2016-5420
> CVE-2016-5421
>
> Affects curl <= 7.50.0
>

Yes, good point.

Ross

[-- Attachment #2: Type: text/html, Size: 721 bytes --]