<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Aug 11, 2016, at 3:21 AM, Burton, Ross <<a href="mailto:ross.burton@intel.com" class="">ross.burton@intel.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On 10 August 2016 at 00:44, Armin Kuster <span dir="ltr" class=""><<a href="mailto:akuster808@gmail.com" target="_blank" class="">akuster808@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":12g" class="a3s aXjCH m15671b210bcad86f">This fixes 3 CVES:<br class="">
<br class="">
CVE-2016-5419<br class="">
CVE-2016-5420<br class="">
CVE-2016-5421<br class="">
<br class="">
Affects curl <= 7.50.0<br class="">
<br class="">
Signed-off-by: Armin Kuster <<a href="mailto:akuster808@gmail.com" class="">akuster808@gmail.com</a>></div></blockquote></div><br class="">Master has 7.50.0.</div></div></div></blockquote><div><br class=""></div><div>7.50.0 has broken API which was fixed with 7.50.1 so we should upgrade asap.</div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><br class=""></div><div class="gmail_extra">Ross</div></div>
-- <br class="">_______________________________________________<br class="">Openembedded-core mailing list<br class=""><a href="mailto:Openembedded-core@lists.openembedded.org" class="">Openembedded-core@lists.openembedded.org</a><br class="">http://lists.openembedded.org/mailman/listinfo/openembedded-core<br class=""></div></blockquote></div><br class=""></body></html>