Zhixiong Chi 6fe39199a4 tiff: Security fix CVE-2016-9539 ...

tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in
readContigTilesIntoBuffer(). Reported as MSVR 35092.

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9539

Patch from:
ae9365db1b

(From OE-Core rev: 58bf0a237ca28459eb8c3afa030c0054f5bc1f16)

(From OE-Core rev: 0933a11707a369c8eaefebd31e8eea634084d66e)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-01-11 17:21:43 +00:00

..

alsa

alsa-lib: allow building ARM thumb again

2016-10-05 10:10:11 +01:00

ffmpeg

ffmpeg: update to 3.1.3

2016-09-03 09:58:39 +01:00

flac

flac: upgrade to 1.3.1

2015-02-08 08:00:29 +00:00

gstreamer

Revert "gst-player: Disable visualizations"

2016-10-05 10:10:11 +01:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: update 1.6.23 -> 1.6.24

2016-08-17 10:35:42 +01:00

libsamplerate

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libsndfile

libsndfile1: 1.0.26 -> 1.0.27

2016-07-26 08:56:27 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fix CVE-2016-9539

2017-01-11 17:21:43 +00:00

libvorbis

libvorbis: remove legacy options

2015-09-03 12:43:20 +01:00

mpeg2dec

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

mpg123

mpg123: update to 1.23.6

2016-09-03 09:58:38 +01:00

pulseaudio

pulseaudio: add ${S}/LICENSE to LIC_FILES_CHKSUM

2016-09-16 15:24:03 +01:00

sbc

sbc: upgrade to 1.3

2014-11-20 14:08:08 +00:00

speex

speex: 1.2rc1 -> 1.2rc2

2015-07-16 15:09:15 +01:00

tremor

upstream_tracking.inc: deprecate and move contents to recipes

2015-09-01 11:44:01 +01:00

webp

libwebp: sepcify neon availability for arm

2016-09-09 11:53:36 +01:00

x264

x264: add textrel to INSANE_SKIP

2016-09-22 11:13:24 +01:00