Tanu Kaskinen 21c85626a5 libvorbis: CVE-2018-5146 ...

Prevent out-of-bounds write in codebook decoding. The bug could allow
code execution from a specially crafted Ogg Vorbis file.

References:
https://www.debian.org/security/2018/dsa-4140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146

(From OE-Core rev: 1f01ce76c76d63f5ffe96baf518e670ae01c4d12)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2018-03-25 09:40:42 +01:00

..

alsa

alsa-utils: 1.1.4 -> 1.1.5

2017-12-10 22:45:18 +00:00

ffmpeg

ffmpeg: upgrade 3.4.1 -> 3.4.2

2018-03-04 11:35:41 +00:00

flac

flac_1.3.1.bb: set CVE_PRODUCT to libflac

2017-07-24 09:13:31 +01:00

gstreamer

gstreamer: refresh patches

2018-03-09 09:17:02 -08:00

lame

lame: 3.99.5 -> 3.100

2017-12-10 22:45:18 +00:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: fix build with gperf 3.1

2017-08-13 09:27:37 +01:00

libogg

libogg: upgrade to 1.3.3

2017-11-30 10:49:21 +00:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: fix upstream version check

2018-03-20 09:59:31 +00:00

libsamplerate

libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate

2017-07-24 09:13:31 +01:00

libsndfile

libsndfile1: Fix CVE-2017-8363

2017-08-18 23:46:38 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fixes

2018-03-25 09:40:41 +01:00

libvorbis

libvorbis: CVE-2018-5146

2018-03-25 09:40:42 +01:00

mpeg2dec

mpeg2dec: Fix textrels QA errors on arm

2017-07-11 15:57:08 +01:00

mpg123

mpg123: upgrade 1.25.8 -> 1.25.10

2018-03-04 11:35:41 +00:00

pulseaudio

pulseaudio: improve glibc 2.27 patch

2018-01-30 12:53:16 +00:00

sbc

sbc: fix license

2017-11-21 13:06:11 +00:00

speex

speex: update SRC_URI

2017-07-06 14:38:15 +01:00

webp

libwebp: update to 0.6.1

2018-02-06 11:06:29 +00:00

x264

x264: upgrade to latest revision

2018-02-06 11:06:29 +00:00