<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 11/24/2017 08:59 AM, Burton, Ross
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAJTo0LYaRi1Jnmrrr-NwkufM452VNfroQT9BiW_2aAwQhna1VA@mail.gmail.com">
<div dir="ltr">I haven't looked into it further than verifying
that reverting the curl upgrade makes it work again.
<div><br>
</div>
<div>dnf -> python -> gnutls -> curl.</div>
</div>
</blockquote>
k. I am setting up an env to rep this issue.<br>
<br>
thanks,<br>
Armin<br>
<blockquote type="cite"
cite="mid:CAJTo0LYaRi1Jnmrrr-NwkufM452VNfroQT9BiW_2aAwQhna1VA@mail.gmail.com">
<div dir="ltr">
<div><br>
</div>
<div>Ross</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 24 November 2017 at 16:57,
akuster808 <span dir="ltr"><<a
href="mailto:akuster808@gmail.com" target="_blank"
moz-do-not-send="true">akuster808@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span class="">
<p><br>
</p>
<br>
<div class="m_5508455879794370387moz-cite-prefix">On
11/24/2017 04:49 AM, Burton, Ross wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Now I remember why this was rejected
last time: it breaks dnf in musl (<a
href="https://autobuilder.yocto.io/builders/nightly-musl/builds/616"
target="_blank" moz-do-not-send="true">https://autobuilder.yocto.io/<wbr>builders/nightly-musl/builds/<wbr>616</a>).</div>
</blockquote>
</span> is it bugged?<span class="HOEnZb"><font
color="#888888"><br>
<br>
- armin</font></span>
<div>
<div class="h5"><br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Ross</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 21 November 2017 at
20:01, Armin Kuster <span dir="ltr"><<a
href="mailto:akuster808@gmail.com"
target="_blank" moz-do-not-send="true">akuster808@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0
0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">From: Armin Kuster
<<a href="mailto:akuster@mvista.com"
target="_blank" moz-do-not-send="true">akuster@mvista.com</a>><br>
<br>
v2] - remove inherit<br>
<br>
curlbuild.h removed from sources<br>
<br>
includes:<br>
CVE-2017-1000257<br>
<br>
removed patches for the following cve fixs:<br>
CVE-2017-1000254<br>
CVE-2017-1000101<br>
CVE-2017-1000100<br>
CVE-2017-1000099<br>
<br>
Signed-off-by: Armin Kuster <<a
href="mailto:akuster@mvista.com"
target="_blank" moz-do-not-send="true">akuster@mvista.com</a>><br>
---<br>
.../curl/{<a href="http://curl_7.54.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">curl_7.54.1.bb</a>
=> <a href="http://curl_7.56.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">curl_7.56.1.bb</a>}
| 14 +++-----------<br>
1 file changed, 3 insertions(+), 11
deletions(-)<br>
rename meta/recipes-support/curl/{<a
href="http://curl_7.54.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">cur<wbr>l_7.54.1.bb</a>
=> <a href="http://curl_7.56.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">curl_7.56.1.bb</a>}
(87%)<br>
<br>
diff --git a/meta/recipes-support/curl/<a
href="http://curl_7.54.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">cu<wbr>rl_7.54.1.bb</a>
b/meta/recipes-support/curl/<a
href="http://curl_7.56.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">cu<wbr>rl_7.56.1.bb</a><br>
similarity index 87%<br>
rename from meta/recipes-support/curl/<a
href="http://curl_7.54.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">curl<wbr>_7.54.1.bb</a><br>
rename to meta/recipes-support/curl/<a
href="http://curl_7.56.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">curl<wbr>_7.56.1.bb</a><br>
index 58f0531..830f350 100644<br>
--- a/meta/recipes-support/curl/<a
href="http://curl_7.54.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">cu<wbr>rl_7.54.1.bb</a><br>
+++ b/meta/recipes-support/curl/<a
href="http://curl_7.56.1.bb"
rel="noreferrer" target="_blank"
moz-do-not-send="true">cu<wbr>rl_7.56.1.bb</a><br>
@@ -7,10 +7,6 @@ LIC_FILES_CHKSUM = "<a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://COPYING;beginline=8</a>;md<wbr>5=3a34942f4ae3fbf1a303160714e6<wbr>6<br>
<br>
SRC_URI = "<a
href="http://curl.haxx.se/download/curl-$%7BPV%7D.tar.bz2"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://curl.haxx.se/download/<wbr>curl-${PV}.tar.bz2</a>
\<br>
<a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://0001-replace-krb5</a>-confi<wbr>g-with-pkg-config.patch
\<br>
- <a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://CVE-2017-1000099.patch</a>
\<br>
- <a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://CVE-2017-1000100.patch</a>
\<br>
- <a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://CVE-2017-1000101.patch</a>
\<br>
- <a
class="m_5508455879794370387moz-txt-link-freetext"
moz-do-not-send="true">file://CVE-2017-1000254.patch</a>
\<br>
"<br>
<br>
SRC_URI_append_class-target = " \<br>
@@ -22,11 +18,11 @@
SRC_URI_append_class-target = " \<br>
#<br>
SRC_URI += <a
class="m_5508455879794370387moz-txt-link-rfc2396E"
moz-do-not-send="true">"
file://configure_ac.patch"</a><br>
<br>
-SRC_URI[md5sum] =
"6b6eb722f512e7a24855ff084f54f<wbr>e55"<br>
-SRC_URI[sha256sum] =
"fdfc4df2d001ee0c44ec071186e77<wbr>0046249263c491fcae48df0e1a3ca8<wbr>f25a0"<br>
+SRC_URI[md5sum] =
"428de25834ef8c04076906d6d5c04<wbr>98e"<br>
+SRC_URI[sha256sum] =
"2594670367875e7d87b0f129b5e46<wbr>90150780884d90244ba0fe3e74a778<wbr>b5f90"<br>
<br>
CVE_PRODUCT = "libcurl"<br>
-inherit autotools pkgconfig binconfig
multilib_header<br>
+inherit autotools pkgconfig binconfig<br>
<br>
PACKAGECONFIG ??=
"${@bb.utils.filter('DISTRO_FE<wbr>ATURES',
'ipv6', d)} gnutls proxy threaded-resolver
zlib"<br>
PACKAGECONFIG_class-native = "ipv6 proxy ssl
threaded-resolver zlib"<br>
@@ -64,10 +60,6 @@ EXTRA_OECONF = " \<br>
--without-libpsl \<br>
"<br>
<br>
-do_install_append() {<br>
- oe_multilib_header curl/curlbuild.h<br>
-}<br>
-<br>
do_install_append_class-targe<wbr>t() {<br>
# cleanup buildpaths from curl-config<br>
sed -i \<br>
<span class="m_5508455879794370387HOEnZb"><font
color="#888888">--<br>
2.7.4<br>
<br>
--<br>
______________________________<wbr>_________________<br>
Openembedded-core mailing list<br>
<a
href="mailto:Openembedded-core@lists.openembedded.org"
target="_blank" moz-do-not-send="true">Openembedded-core@lists.openem<wbr>bedded.org</a><br>
<a
href="http://lists.openembedded.org/mailman/listinfo/openembedded-core"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://lists.openembedded.org/<wbr>mailman/listinfo/openembedded-<wbr>core</a><br>
</font></span></blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</body>
</html>