[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH for-1.4] block/curl: only restrict protocols wit
|
From: |
Andreas Färber |
|
Subject: |
Re: [Qemu-devel] [PATCH for-1.4] block/curl: only restrict protocols with libcurl>=7.19.4 |
|
Date: |
Wed, 13 Feb 2013 14:15:19 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130105 Thunderbird/17.0.2 |
Am 13.02.2013 09:25, schrieb Stefan Hajnoczi:
> The curl_easy_setopt(state->curl, CURLOPT_PROTOCOLS, ...) interface was
> introduced in libcurl 7.19.4. Therefore we cannot protect against
> CVE-2013-0249 when linking against an older libcurl.
>
> This fixes the build failure introduced by
> fb6d1bbd246c7a57ef53d3847ef225cd1349d602.
>
> Reported-by: Andreas Färber <address@hidden>
> Signed-off-by: Stefan Hajnoczi <address@hidden>
Tested-by: Andreas Färber <address@hidden>
That fixes the build without --disable-curl on Mac OS X v10.5.8 for me
(7.16.4).
Thanks,
Andreas