Bug 7017 - Curl: investigate if curl is affected by "Poodle" (CVE-2014-3566)
Summary: Curl: investigate if curl is affected by "Poodle" (CVE-2014-3566)
Status: VERIFIED NOTABUG
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: connectivity (show other bugs)
Version: 1.8
Hardware: x86 Multiple
: Medium+ normal
Target Milestone: 1.8 M2
Assignee: Sona Sarmadi
QA Contact: Costin
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2014-12-03 07:38 UTC by Sona Sarmadi
Modified: 2015-04-28 09:14 UTC (History)
4 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: Don't know

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sona Sarmadi 2014-12-03 07:38:31 UTC 
Accourding to Daniel S. curl is not affected by the POODLE attack. Described further in Daniel's blog 
post: http://daniel.haxx.se/blog/2014/10/17/curl-is-no-poodle/  

Read more here: 
http://unix.stackexchange.com/questions/162816/disable-sslv3-in-curl
http://curl.haxx.se/news.html
Comment 1 Saul Wold 2014-12-04 15:47:15 UTC 
Since it's unaffected closing this bug now
Comment 2 Costin 2015-04-28 09:14:16 UTC 
Hello,

Read comment and links. Marking as verified.

Costin