curl: CVE-2014-3707

CVE-2014-3707, libcurl duphandle read out of bounds
libcurl's function curl_easy_duphandle() has a bug
that can lead to libcurl eventually sending off
sensitive data that was not intended for sending.

Reference
http://curl.haxx.se/docs/adv_20141105.html

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Tudor Florea <tudor.florea@enea.com>

1 files changed, 1 insertions, 0 deletions

diff --git a/meta/recipes-support/curl/curl_7.35.0.bb b/meta/recipes-support/curl/curl_7.35.0.bb
index 3021dec11f..5fa7277449 100644
--- a/meta/recipes-support/curl/curl_7.35.0.bb
+++ b/meta/recipes-support/curl/curl_7.35.0.bb
@@ -13,6 +13,7 @@ SRC_URI = "http://curl.haxx.se/download/curl-${PV}.tar.bz2 \
            file://pkgconfig_fix.patch \
            file://CVE-2014-3613.patch \
            file://CVE-2014-3620.patch \
+           file://CVE-2014-3707.patch \
 "
 
 # curl likes to set -g0 in CFLAGS, so we stop it