From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.windriver.com (mail.windriver.com [147.11.1.11]) by mail.openembedded.org (Postfix) with ESMTP id 9E79178226 for ; Tue, 31 Oct 2017 09:48:16 +0000 (UTC) Received: from ALA-HCA.corp.ad.wrs.com (ala-hca.corp.ad.wrs.com [147.11.189.40]) by mail.windriver.com (8.15.2/8.15.1) with ESMTPS id v9V9mGnm016085 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 31 Oct 2017 02:48:16 -0700 (PDT) Received: from [128.224.163.166] (128.224.163.166) by ALA-HCA.corp.ad.wrs.com (147.11.189.50) with Microsoft SMTP Server id 14.3.361.1; Tue, 31 Oct 2017 02:48:15 -0700 To: Alexander Kanavin , References: <1509440578-173066-1-git-send-email-zhixiong.chi@windriver.com> <4903a7b3-5039-9b7c-9372-37f10d555b9c@linux.intel.com> From: Zhixiong Chi Message-ID: <59F846E4.3050003@windriver.com> Date: Tue, 31 Oct 2017 17:48:20 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <4903a7b3-5039-9b7c-9372-37f10d555b9c@linux.intel.com> Subject: Re: [PATCH] wget: CVE-2017-13089 and CVE-2017-13090 X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Oct 2017 09:48:16 -0000 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 8bit On 2017年10月31日 17:13, Alexander Kanavin wrote: > On 10/31/2017 11:02 AM, Zhixiong Chi wrote: >> Patches from: >> http://git.savannah.gnu.org/cgit/wget.git/patch/?id=d892291fb8ace4c3b734ea5125770989c215df3f >> >> http://git.savannah.gnu.org/cgit/wget.git/patch/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba >> >> >> CVE: CVE-2017-13089 CVE-2017-13090 > > Update the master to 1.19.2 instead please. Copy that, thanks for your suggestion. > > Alex -- --------------------- Thanks, Zhixiong Chi Tel: +86-10-8477-7036