Sona Sarmadi cafdccb29c libpng16: CVE-2015-0973 ...

Fixes CVE-2015-0973 (duplicate of CVE-2014-9495), a heap-based overflow
vulnerability in the png_combine_row() function of the libpng library,
when very large interlaced images were used.

Upstream patch:
dc294204b6/

External Reference:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0973
http://seclists.org/oss-sec/2014/q4/1133

(From OE-Core rev: 10c8aeebca301ffd853e75df3f9c1d16d0352d76)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-05-01 12:34:51 +01:00

..

alsa

alsa-tools: Fix build without x11

2014-04-04 11:53:50 +01:00

flac

autotools-brokensep: Mark recipes with broken separate build dir support

2014-02-28 14:01:16 +00:00

gstreamer

gst-ffmpeg: Security Advisory - ffmpeg - CVE-2013-0869

2014-10-23 16:13:31 +01:00

lame

lame: update HOMEPAGE

2014-01-02 12:50:19 +00:00

liba52

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libav

libav: Add libsdl to DEPENDS only when x11 is enabled

2014-05-29 13:42:17 +01:00

libid3tag

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

libmad

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

libogg

libogg: upgrade to 1.3.1

2013-07-13 18:23:33 +01:00

libomxil

libomxil-0.9.3: fix configure unrecognised option

2014-03-31 22:53:45 +01:00

libpng

libpng16: CVE-2015-0973

2015-05-01 12:34:51 +01:00

libsamplerate

libsamplerate0: add HOMEPAGE

2014-01-02 12:50:19 +00:00

libsndfile

recipes: bump PRs

2014-03-05 17:36:37 +00:00

libtheora

Upstream-Status: Add Upstream-Status for some missing patches

2011-07-26 15:48:08 +01:00

libtiff

libtiff: Security Advisory - CVE-2012-4564

2014-10-10 15:06:06 +01:00

libvorbis

libvorbis: upgrade to 1.3.4

2014-02-20 14:28:11 +00:00

mpeg2dec

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

pulseaudio

pulseaudio: fix CVE-2014-3970

2014-10-10 15:06:05 +01:00

sbc

sbc: upgrade to 1.2

2014-02-09 09:40:00 +00:00

speex

speex: configure in float or fixed mode based on TARGET_FPU

2014-01-28 00:52:32 +00:00

tremor

tremor: remove unrecognised option

2014-01-02 12:50:11 +00:00

x264

x264: Update SRCREV to match commit in upstream git repo

2014-06-10 17:12:19 +01:00