mirror of
https://git.yoctoproject.org/poky
synced 2026-04-17 18:32:12 +02:00
curl: upgrade to 7.58.0
(From OE-Core rev: 9763c9d649a22f9024d832eb625bee35b583e717) This update include these CVES: CVE-2018-1000122 CWE-126: Buffer Over-read CVE-2018-1000121 CWE-476: NULL Pointer Dereference CVE-2018-1000120 CWE-122: Heap-based Buffer Overflow Mostly bugfixes. (From OE-Core rev: f99e2ce01ed01cf036a8282b2d155d941ed7ec9b) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
32a6e809f8
commit
c4f6da7849
@@ -15,8 +15,8 @@ SRC_URI = "http://curl.haxx.se/download/curl-${PV}.tar.bz2 \
|
||||
#
|
||||
SRC_URI += " file://configure_ac.patch"
|
||||
|
||||
SRC_URI[md5sum] = "dd3e22e923be17663e67f721c2aec054"
|
||||
SRC_URI[sha256sum] = "c92fe31a348eae079121b73884065e600c533493eb50f1f6cee9c48a3f454826"
|
||||
SRC_URI[md5sum] = "fa049f9f90c1ae473a2a7bcfa14de976"
|
||||
SRC_URI[sha256sum] = "1cb081f97807c01e3ed747b6e1c9fee7a01cb10048f1cd0b5f56cfe0209de731"
|
||||
|
||||
CVE_PRODUCT = "libcurl"
|
||||
inherit autotools pkgconfig binconfig multilib_header
|
||||
Reference in New Issue
Block a user