Jackie Huang 3577a8277e libsndfile1: Fix CVE-2017-8363 ...

Backport the patch to fix CVE-2017-8363:

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows
remote attackers to cause a denial of service (heap-based buffer
over-read and application crash) via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-8363

(From OE-Core rev: 9cc9956c5ed09f9016cb23bd763652e5ab55f3cd)

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-18 23:46:38 +01:00

..

CVE-2017-6892.patch

libsndfile1: Fix CVE-2017-6892

2017-06-28 15:52:18 +01:00

CVE-2017-8361-8365.patch

libsndfile1: Fix CVE-2017-8361 and CVE-2017-8365

2017-08-18 23:46:37 +01:00

CVE-2017-8362.patch

libsndfile1: Fix CVE-2017-8362

2017-08-18 23:46:38 +01:00

CVE-2017-8363.patch

libsndfile1: Fix CVE-2017-8363

2017-08-18 23:46:38 +01:00