[OE-core] [PATCH v2] curl: Security Advisory - CVE-2014-3613 & CVE-2014-3620

Burton, Ross ross.burton at intel.com
Thu Oct 2 13:54:05 UTC 2014


On 1 October 2014 14:29, Maxin B. John <maxin.john at enea.com> wrote:
> Details of vulnerabilities are available below:
> CVE-2014-3613: http://curl.haxx.se/docs/adv_20140910A.html
> CVE-2014-3620: http://curl.haxx.se/docs/adv_20140910B.html
>
> Signed-off-by: Maxin B. John <maxin.john at enea.com>
> ---

Still fails to apply the patches (different failure to before).

ERROR: Command Error: exit status: 1  Output:
Applying patch CVE-2014-3620.patch
patching file lib/cookie.c
patching file tests/data/test61
Hunk #1 FAILED at 23.
1 out of 1 hunk FAILED -- rejects in file tests/data/test61
Patch CVE-2014-3620.patch does not apply (enforce with -f)
ERROR: Function failed: patch_do_patch
ERROR: Logfile of failure stored in:
/data/poky-master/tmp/work/corei7-64-poky-linux/curl/7.37.1-r0/temp/log.do_patch.18104
ERROR: Task 6649
(/home/ross/Yocto/poky/meta/recipes-support/curl/curl_7.37.1.bb,
do_patch) failed with exit code '1'

Ross



More information about the Openembedded-core mailing list