Baogen Shang 6e71a5f24b libtiff: CVE-2013-4243 ...

cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4243

(From OE-Core dora rev: a2a200a3951cecd7dd43dee360e0260051c97416)

(From OE-Core rev: 95f9889ac7e2731e3fb67f4b9db4bb634dd2a894)

Signed-off-by: Baogen Shang <baogen.shang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2013-12-12 22:17:33 +00:00

..

alsa

alsa-tools: Pass ACLOCAL_FLAGS so aclocal uses the right params

2013-07-09 10:53:56 +01:00

flac

flac: replace obsolete automake macros with working ones

2013-01-10 23:43:13 +00:00

gstreamer

gst-ffmpeg: fix CVE-2013-3674

2013-12-12 22:17:33 +00:00

lame

lame: fix build with automake 1.12.x

2012-07-17 10:54:06 +01:00

liba52

liba52: refactor packages for staticdev

2012-01-19 13:26:10 +00:00

libid3tag

libid3tag: replace obsolete automake macros with working ones

2013-01-10 23:43:13 +00:00

libmad

libmad: replace obsolete automake macros with working ones

2013-01-15 08:10:11 +00:00

libogg

libogg: replace obsolete automake macros with working ones

2013-01-15 08:10:11 +00:00

libomxil

Add LICENSE_FLAGS to packages mentioned in COMMERCIAL_LICENSE

2012-01-24 11:54:15 +00:00

libpng

libpng : update to 1.60.0

2013-03-05 13:14:56 +00:00

libsamplerate

libsamplerate: depends on libsdnfile

2012-08-17 18:04:26 +01:00

libsndfile

libsndfile1: use PACKAGECONFIG for alsa distro feature

2012-05-03 15:48:01 +01:00

libtheora

Upstream-Status: Add Upstream-Status for some missing patches

2011-07-26 15:48:08 +01:00

libtiff

libtiff: CVE-2013-4243

2013-12-12 22:17:33 +00:00

libvorbis

libvorbis: replace obsolete automake macros with working ones

2013-01-15 08:10:12 +00:00

mpeg2dec

mpeg2dec: depend on libx11 conditionally

2012-02-23 23:59:38 +00:00

pulseaudio

pulseaudio: add PACKAGECONFIG for jack

2013-07-29 13:28:23 +01:00

sbc

sbc: Fix PN -> BPN for multilib

2013-02-22 06:09:21 -08:00

speex

speex: use lib_package bbclass

2012-07-04 17:40:35 +01:00

tremor

tremor: replace obsolete automake macros with working ones

2013-01-16 11:57:36 +00:00