<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openembedded-core.git/meta/recipes-support/curl, branch 2015-4</title>
<subtitle>Mirror of openembedded-core</subtitle>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/'/>
<entry>
<title>curl: remove samba from PACKAGECONFIG[smb] DEPENDS</title>
<updated>2015-03-16T17:38:50+00:00</updated>
<author>
<name>Andre McCurdy</name>
<email>armccurdy@gmail.com</email>
</author>
<published>2015-03-12T00:27:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=b4c7921001a30e0162cacbe12b1a5b888b36db57'/>
<id>b4c7921001a30e0162cacbe12b1a5b888b36db57</id>
<content type='text'>
Enabling support for the smb protocol does not create
a build time dependency on samba.

Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Enabling support for the smb protocol does not create
a build time dependency on samba.

Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: Add PACKAGECONFIG for samba</title>
<updated>2015-01-23T11:35:24+00:00</updated>
<author>
<name>Maxin B. John</name>
<email>maxin.john@enea.com</email>
</author>
<published>2015-01-19T13:19:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=c776fd463902594e77cf9a8199039714a078437c'/>
<id>c776fd463902594e77cf9a8199039714a078437c</id>
<content type='text'>
curl 7.40.0 added support for the SMB/CIFS protocol. So provide
a PACKAGECONFIG option for smb.

Reported-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Maxin B. John &lt;maxin.john@enea.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
curl 7.40.0 added support for the SMB/CIFS protocol. So provide
a PACKAGECONFIG option for smb.

Reported-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Maxin B. John &lt;maxin.john@enea.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: upgrade to 7.40</title>
<updated>2015-01-16T22:59:45+00:00</updated>
<author>
<name>Maxin B. John</name>
<email>maxin.john@enea.com</email>
</author>
<published>2015-01-09T12:06:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=d3704312252c1607883099063151c599cca81cbe'/>
<id>d3704312252c1607883099063151c599cca81cbe</id>
<content type='text'>
Bump to version 7.40

Signed-off-by: Maxin B. John &lt;maxin.john@enea.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bump to version 7.40

Signed-off-by: Maxin B. John &lt;maxin.john@enea.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: Ugrade to 7.38</title>
<updated>2014-12-03T12:22:39+00:00</updated>
<author>
<name>Saul Wold</name>
<email>sgw@linux.intel.com</email>
</author>
<published>2014-10-28T14:55:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=257ca2054c907c9c9868ccae57c6e0d750fb1164'/>
<id>257ca2054c907c9c9868ccae57c6e0d750fb1164</id>
<content type='text'>
Remove backported CVE patches

Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove backported CVE patches

Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: Security Advisory - curl - CVE-2014-3620</title>
<updated>2014-11-05T16:49:31+00:00</updated>
<author>
<name>Chong Lu</name>
<email>Chong.Lu@windriver.com</email>
</author>
<published>2014-11-04T01:35:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=ddbaade8afbc9767583728bfdc220639203d6853'/>
<id>ddbaade8afbc9767583728bfdc220639203d6853</id>
<content type='text'>
libcurl wrongly allows cookies to be set for Top Level Domains (TLDs), thus
making them apply broader than cookies are allowed. This can allow arbitrary
sites to set cookies that then would get sent to a different and unrelated site
or domain.

Signed-off-by: Chong Lu &lt;Chong.Lu@windriver.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
libcurl wrongly allows cookies to be set for Top Level Domains (TLDs), thus
making them apply broader than cookies are allowed. This can allow arbitrary
sites to set cookies that then would get sent to a different and unrelated site
or domain.

Signed-off-by: Chong Lu &lt;Chong.Lu@windriver.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: Security Advisory - curl - CVE-2014-3613</title>
<updated>2014-11-04T10:19:56+00:00</updated>
<author>
<name>Chong Lu</name>
<email>Chong.Lu@windriver.com</email>
</author>
<published>2014-10-24T08:26:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=985ef933208da1dd1f17645613ce08e6ad27e2c1'/>
<id>985ef933208da1dd1f17645613ce08e6ad27e2c1</id>
<content type='text'>
By not detecting and rejecting domain names for partial literal IP addresses
properly when parsing received HTTP cookies, libcurl can be fooled to both
sending cookies to wrong sites and into allowing arbitrary sites to set cookies
for others.

Signed-off-by: Chong Lu &lt;Chong.Lu@windriver.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
By not detecting and rejecting domain names for partial literal IP addresses
properly when parsing received HTTP cookies, libcurl can be fooled to both
sending cookies to wrong sites and into allowing arbitrary sites to set cookies
for others.

Signed-off-by: Chong Lu &lt;Chong.Lu@windriver.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: add PACKAGECONFIG option to use libssh2</title>
<updated>2014-10-10T09:39:12+00:00</updated>
<author>
<name>Fabrice Coulon</name>
<email>fabrice@axis.com</email>
</author>
<published>2014-10-03T08:21:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=d425e005d274cac0ef7160f53c41bda175444f69'/>
<id>d425e005d274cac0ef7160f53c41bda175444f69</id>
<content type='text'>
The user can enable libssh2 via conf/local.conf or custom distro
configuration, this will pull in libssh2, which is not used by default.

For example, a curl_x.y.z.bbappend file containing the following line:
PACKAGECONFIG += "libssh2"

Signed-off-by: Fabrice Coulon &lt;fabrice.coulon@axis.com&gt;
Signed-off-by: Olof Johansson &lt;olof.johansson@axis.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The user can enable libssh2 via conf/local.conf or custom distro
configuration, this will pull in libssh2, which is not used by default.

For example, a curl_x.y.z.bbappend file containing the following line:
PACKAGECONFIG += "libssh2"

Signed-off-by: Fabrice Coulon &lt;fabrice.coulon@axis.com&gt;
Signed-off-by: Olof Johansson &lt;olof.johansson@axis.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: add a PACKAGECONFIG for librtmp</title>
<updated>2014-09-29T11:12:35+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2014-09-25T22:58:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=8521d4d6b73c93ae60cca3d04673cdd02c27446c'/>
<id>8521d4d6b73c93ae60cca3d04673cdd02c27446c</id>
<content type='text'>
Otherwise this is a non-deterministic build dependency.

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Otherwise this is a non-deterministic build dependency.

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: --with-random is only applicable with openssl</title>
<updated>2014-08-15T17:19:53+00:00</updated>
<author>
<name>Andre McCurdy</name>
<email>armccurdy@gmail.com</email>
</author>
<published>2014-08-13T07:36:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=482493b54d97c455bf4849efed3e543340412d7b'/>
<id>482493b54d97c455bf4849efed3e543340412d7b</id>
<content type='text'>
Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>curl: let configure find gnutls via pkg-config</title>
<updated>2014-08-15T17:19:53+00:00</updated>
<author>
<name>Andre McCurdy</name>
<email>armccurdy@gmail.com</email>
</author>
<published>2014-08-13T07:36:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=3682d661f3b3a6fa7d9ef37968746cbaf1ede078'/>
<id>3682d661f3b3a6fa7d9ef37968746cbaf1ede078</id>
<content type='text'>
Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
</feed>
