Yue Tao 452619ba41 libtiff: Security Advisory - CVE-2012-4564 ...

v2 changes:
* update format for commit log
* add Upstream-Status for patch

ppm2tiff does not check the return value of the TIFFScanlineSize
function, which allows remote attackers to cause a denial of service
(crash) and possibly execute arbitrary code via a crafted PPM image that
triggers an integer overflow, a zero-memory allocation, and a heap-based
buffer overflow.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4564

(From OE-Core rev: 9f02922d44de483ef4d02ce95b55efe79a8b09a2)

(From OE-Core rev: ff60c490c4fdb9f89d2b8e8fe7f2e7c4f2ff631f)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-10-10 15:06:06 +01:00

..

classes

update-rc.d/systemd: Remove OVERRIDES dependency

2014-09-29 17:58:35 +01:00

conf

layer.conf: Mark opkg-utils as ABISAFE for update-alternatives usage

2014-09-29 17:58:35 +01:00

files

unfs3: Add a NFSv3 user mode server for use with runqemu

2014-01-28 00:52:35 +00:00

lib

rootfs.py: change the logic in _uninstall_unneeded

2014-06-17 08:58:54 +01:00

recipes-bsp

grub_git: fix build warning->error

2014-06-10 17:12:19 +01:00

recipes-connectivity

openssl: fix CVE-2014-3470

2014-06-10 17:12:20 +01:00

recipes-core

libxml2: fix python packaging for nativesdk

2014-10-09 21:17:32 +01:00

recipes-devtools

dpkg: Security Advisory - CVE-2014-3127

2014-10-10 15:06:06 +01:00

recipes-extended

bash: Fix CVE-2014-7169

2014-09-29 12:16:38 +01:00

recipes-gnome

gtk+: Add PACKAGECONFIG for directfb

2014-05-29 13:42:23 +01:00

recipes-graphics

cairo: explicitly disable LTO support by backporting patch which removes it

2014-08-11 12:06:54 +01:00

recipes-kernel

perf: explicitly disable libunwind

2014-08-11 12:06:54 +01:00

recipes-lsb4

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

recipes-multimedia

libtiff: Security Advisory - CVE-2012-4564

2014-10-10 15:06:06 +01:00

recipes-qt

qt4: Fix Qt 4.8.5 source to new location

2014-08-11 12:08:12 +01:00

recipes-rt

rt-tests: Fix warning flag typo

2014-05-29 13:42:24 +01:00

recipes-sato

core-image-sato-sdk: Drop qt4 on mips64

2014-03-30 10:10:34 +01:00

recipes-support

nspr: Fix for CVE-2014-1545

2014-10-10 15:06:06 +01:00

site

mips64-linux: set ac_cv_sizeof_ssize_t

2014-03-17 14:01:42 +00:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

…

recipes.txt

meta/recipes.txt: add recipes-lsb4

2013-04-10 09:23:17 +01:00