diff options
author | Richard Purdie <richard.purdie@linuxfoundation.org> | 2019-02-18 08:21:58 -0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2019-02-25 10:42:56 +0000 |
commit | 41c3ee4fe87a181786c47da044da700e8f605540 (patch) | |
tree | 462f67044c27e077f5ad3eb0a0544368b69247b2 /meta | |
parent | 4a94dc8daab8890aaff36ffafdfe2feaa52902d4 (diff) | |
download | openembedded-core-contrib-41c3ee4fe87a181786c47da044da700e8f605540.tar.gz |
curl: upgrade 7.63.0 -> 7.64.0
The license checksum changed as the copyright years changed.
Fixes:
- CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
- CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
- CVE-2019-3823: SMTP end-of-response out-of-bounds read
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r-- | meta/recipes-support/curl/curl_7.64.0.bb (renamed from meta/recipes-support/curl/curl_7.63.0.bb) | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/meta/recipes-support/curl/curl_7.63.0.bb b/meta/recipes-support/curl/curl_7.64.0.bb index f7557a2f46..a1b5e7d579 100644 --- a/meta/recipes-support/curl/curl_7.63.0.bb +++ b/meta/recipes-support/curl/curl_7.64.0.bb @@ -3,14 +3,14 @@ HOMEPAGE = "http://curl.haxx.se/" BUGTRACKER = "http://curl.haxx.se/mail/list.cgi?list=curl-tracker" SECTION = "console/network" LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://COPYING;md5=ef889a37a5a874490ac7ce116396f29a" +LIC_FILES_CHKSUM = "file://COPYING;md5=be5d9e1419c4363f4b32037a2d3b7ffa" SRC_URI = "http://curl.haxx.se/download/curl-${PV}.tar.bz2 \ file://0001-replace-krb5-config-with-pkg-config.patch \ " -SRC_URI[md5sum] = "0a6c1e993bd5102bc52fc89900542644" -SRC_URI[sha256sum] = "9bab7ed4ecff77020a312d84cc5fb7eb02d58419d218f267477a724a17fd8dd8" +SRC_URI[md5sum] = "d0bcc586873cfef08b4b9594e5395a33" +SRC_URI[sha256sum] = "d573ba1c2d1cf9d8533fadcce480d778417964e8d04ccddcc76e591d544cf2eb" CVE_PRODUCT = "curl libcurl" inherit autotools pkgconfig binconfig multilib_header |