Re: [OE-core] [PATCH] curl: upgrade to 7.38.0

2014-09-25 Thread Maxin B. John
Hi Ross, On Wed, Sep 24, 2014 at 11:27:57PM +0100, Burton, Ross wrote: On 10 September 2014 15:43, Maxin B. John maxin.j...@enea.com wrote: Fixes two HTTP cookie related security bugs: 1. CVE-2014-3613 2. CVE-2014-3620 Can these be backported instead to 7.37.1? Upgrading to a new

Re: [OE-core] [PATCH] curl: upgrade to 7.38.0

2014-09-24 Thread Burton, Ross
On 10 September 2014 15:43, Maxin B. John maxin.j...@enea.com wrote: Fixes two HTTP cookie related security bugs: 1. CVE-2014-3613 2. CVE-2014-3620 Can these be backported instead to 7.37.1? Upgrading to a new major release with many new features is exceptional now we've frozen. Ross --

[OE-core] [PATCH] curl: upgrade to 7.38.0

2014-09-10 Thread Maxin B. John
Fixes two HTTP cookie related security bugs: 1. CVE-2014-3613 2. CVE-2014-3620 Changelog: http://curl.haxx.se/changes.html#7_38_0 Signed-off-by: Maxin B. John maxin.j...@enea.com --- meta/recipes-support/curl/{curl_7.37.1.bb = curl_7.38.0.bb} | 4 ++-- 1 file changed, 2 insertions(+),