mirror of
https://git.yoctoproject.org/poky
synced 2026-03-29 05:02:22 +02:00
Backport the CVE patches from upstream
https://github.com/curl/curl/commit/ec9cc725d598ac
a95a6ce6b8
https://github.com/curl/curl/commit/69a358f2186e04
https://github.com/curl/curl/commit/d9d01672785b.patch
0002-remove-void-protop-create-union-p.patch is added because the CVE-2020-8285 fix is
dependent on it.
CVE:
CVE-2020-8284
CVE-2020-8285
CVE-2020-8286
(From OE-Core rev: f1a0ea55c0ae2cce7f7c3c6c73f57c5b8222c860)
Signed-off-by: Khairul Rohaizzat Jamaluddin <khairul.rohaizzat.jamaluddin@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>