Ming Liu 8cccf5fc9f libtiff: fix CVE-2013-1960 ...

Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1960

(From OE-Core rev: 66387677cbd85ba4a76a254942377621acd68249)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2013-12-12 17:00:24 +00:00

..

classes

image-mklibs: ensure sysroot is correctly set when calling gcc

2013-12-12 17:00:23 +00:00

conf

documentation.conf: update contents

2013-09-24 17:57:03 +01:00

files

device_table-minimal.txt: change group of /dev/hda back to disk

2013-12-12 16:59:52 +00:00

lib

buildhistory_analysis: fix error when comparing image contents

2013-12-12 17:00:19 +00:00

recipes-bsp

grub: add xz RDEPENDS

2013-12-12 17:00:20 +00:00

recipes-connectivity

irda-utils: restart irda daemon correctly

2013-12-12 17:00:14 +00:00

recipes-core

util-linux: Package readprofile into it's own package

2013-12-12 17:00:23 +00:00

recipes-devtools

syslinux: use cross toolchain to compile

2013-12-12 17:00:23 +00:00

recipes-extended

ethtool: Fix ptest compile

2013-12-12 17:00:22 +00:00

recipes-gnome

libunique: Add PACKAGECONFIG for dbus

2013-10-07 09:37:32 +01:00

recipes-graphics

weston-init: start weston on a new VT

2013-12-12 17:00:12 +00:00

recipes-kernel

lttng-modules: Update to 2.3.3 version

2013-12-12 17:00:18 +00:00

recipes-lsb4

libpng12: rename libpng_1.2.50 to libpng12

2013-04-09 13:16:53 +01:00

recipes-multimedia

libtiff: fix CVE-2013-1960

2013-12-12 17:00:24 +00:00

recipes-qt

qt4-x11-free: depend on ICU

2013-12-12 17:00:24 +00:00

recipes-rt

rt-tests: add Upstream-Status for cyclictest patch

2013-07-29 13:09:03 +01:00

recipes-sato

sato-icon-theme: add more compatibility symlinks

2013-09-30 22:11:58 +01:00

recipes-support

boost: Add patch to avoid undefined references to boost::atomic::lockpool::get_lock_for()

2013-12-12 17:00:18 +00:00

site

native: Use a native site file and ensure the correct sed is used

2013-09-30 22:11:57 +01:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

meta/recipes.txt: add recipes-lsb4

2013-04-10 09:23:17 +01:00