Martin Jansa 6c79f0424b tiff: add CVE tag to b258ed69a485a9cfb299d9f060eb2a46c54e5903.patch ...

* according to https://bugzilla.redhat.com/show_bug.cgi?id=2118863
  this commit should be the fix for CVE-2022-2868

* resolves false-possitive entry in:
  https://lists.yoctoproject.org/g/yocto-security/message/705

  CVE-2022-2868 (CVSS3: 8.1 HIGH): tiff https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-2868

(From OE-Core rev: 97ad71541996023075950337e8b133c1a8551e0f)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-12-07 15:02:45 +00:00

..

alsa

alsa-plugins: fix libavtp vs. avtp packageconfig

2022-06-11 10:06:13 +01:00

ffmpeg

ffmpeg: fix for CVE-2022-3965

2022-12-01 19:35:04 +00:00

flac

flac: upgrade 1.3.3 -> 1.3.4

2022-02-25 12:41:24 +00:00

gstreamer

gstreamer1.0: upgrade 1.20.3 -> 1.20.4

2022-12-01 19:35:05 +00:00

lame

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

liba52

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libogg

libogg: upgrade 1.3.4 -> 1.3.5

2021-06-12 22:54:14 +01:00

libomxil

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libpng

libpng: upgrade 1.6.37 -> 1.6.38

2022-09-28 08:02:10 +01:00

libsamplerate

libsamplerate0: update 0.1.9 -> 0.2.2

2021-11-21 11:05:01 +00:00

libsndfile

libsndfile1: Backport fix for CVE-2021-4156

2022-12-01 19:35:04 +00:00

libtheora

libtheora: Clarify BSD license variant

2019-10-15 14:16:11 +01:00

libtiff

tiff: add CVE tag to b258ed69a485a9cfb299d9f060eb2a46c54e5903.patch

2022-12-07 15:02:45 +00:00

libvorbis

meta: fix some unresponsive homepages and bugtracker links

2020-10-30 13:22:48 +00:00

mpeg2dec

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

mpg123

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

pulseaudio

pulseaudio: add m4-native to DEPENDS

2022-07-25 15:11:46 +01:00

sbc

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

speex

speex: fix CVE-2020-23903

2022-01-17 11:49:12 +00:00

webp

libwebp: upgrade 1.2.3 -> 1.2.4

2022-08-31 16:54:17 +01:00

x264

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00