Bug 7017

Summary:	Curl: investigate if curl is affected by "Poodle" (CVE-2014-3566)
Product:	[Build System, Metadata & Runtime] OE-Core	Reporter:	Sona Sarmadi <sona.sarmadi>
Component:	connectivity	Assignee:	Sona Sarmadi <sona.sarmadi>
Status:	VERIFIED NOTABUG	QA Contact:	Costin <costin.c.constantin>
Severity:	normal
Priority:	Medium+	CC:	alexandru.c.georgescu, meta.mr.watcher, meta.watcher, sgw
Version:	1.8
Target Milestone:	1.8 M2
Hardware:	x86
OS:	Multiple
Whiteboard:
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	Don't know

Description Sona Sarmadi 2014-12-03 07:38:31 UTC

Accourding to Daniel S. curl is not affected by the POODLE attack. Described further in Daniel's blog 
post: http://daniel.haxx.se/blog/2014/10/17/curl-is-no-poodle/  

Read more here: 
http://unix.stackexchange.com/questions/162816/disable-sslv3-in-curl
http://curl.haxx.se/news.html

Comment 1 Saul Wold 2014-12-04 15:47:15 UTC

Since it's unaffected closing this bug now

Comment 2 Costin 2015-04-28 09:14:16 UTC

Hello,

Read comment and links. Marking as verified.

Costin