From 702cf1e964f09d15b3681f20131988fcfdbbd387 Mon Sep 17 00:00:00 2001 From: Robert Joslyn Date: Sun, 17 Jul 2022 11:12:52 -0700 Subject: curl: Fix multiple CVEs Backport fixes for: * CVE-2022-32205 - https://curl.se/docs/CVE-2022-32205.html * CVE-2022-32206 - https://curl.se/docs/CVE-2022-32206.html * CVE-2022-32207 - https://curl.se/docs/CVE-2022-32207.html * CVE-2022-32208 - https://curl.se/docs/CVE-2022-32208.html (From OE-Core rev: 2749916ff534aecfd2a7871268b1166e5bb5bca4) Signed-off-by: Robert Joslyn Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie --- meta/recipes-support/curl/curl_7.82.0.bb | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'meta/recipes-support/curl/curl_7.82.0.bb') diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.82.0.bb index d5dfe62a39..67de0220c6 100644 --- a/meta/recipes-support/curl/curl_7.82.0.bb +++ b/meta/recipes-support/curl/curl_7.82.0.bb @@ -24,6 +24,10 @@ SRC_URI = "https://curl.se/download/${BP}.tar.xz \ file://CVE-2022-27782-1.patch \ file://CVE-2022-27782-2.patch \ file://0001-openssl-fix-CN-check-error-code.patch \ + file://CVE-2022-32205.patch \ + file://CVE-2022-32206.patch \ + file://CVE-2022-32207.patch \ + file://CVE-2022-32208.patch \ " SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c" -- cgit v1.2.3-54-g00ecf