Tanu Kaskinen 8950d4ffc4 libvorbis: CVE-2017-14632 ...

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632

(From OE-Core rev: e584aca38396db5e3d461f57804519261eecedc2)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2018-04-02 17:06:25 +01:00

..

alsa

alsa-utils: Do not hardcode path to /lib/udev

2017-09-21 16:55:57 +01:00

ffmpeg

ffmpeg: use static package list

2017-03-01 23:27:10 +00:00

flac

flac_1.3.1.bb: set CVE_PRODUCT to libflac

2017-08-29 11:57:27 +01:00

gstreamer

gst-player: Disable visualizations as workaround

2017-04-29 11:17:23 +01:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: Upgrade 1.6.26 -> 1.6.28

2017-01-26 10:44:28 +00:00

libsamplerate

libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate

2017-08-29 11:57:27 +01:00

libsndfile

libsndfile1: Fix CVE-2017-8363

2017-09-11 22:15:58 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fix for CVE-2017-7593

2017-11-05 22:39:49 +00:00

libvorbis

libvorbis: CVE-2017-14632

2018-04-02 17:06:25 +01:00

mpeg2dec

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

mpg123

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

pulseaudio

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

sbc

sbc: upgrade to 1.3

2014-11-20 14:08:08 +00:00

speex

speex: 1.2rc1 -> 1.2rc2

2015-07-16 15:09:15 +01:00

webp

libwebp: update to 0.6.0

2017-03-01 23:27:09 +00:00

x264

x264: Upgrade to stable branch head

2017-03-01 23:27:07 +00:00