Yi Zhao 9ec4a4629d taglib: Security fix CVE-2017-12678 ...

CVE-2017-12678: In TagLib 1.11.1, the rebuildAggregateFrames function in
id3v2framefactory.cpp has a pointer to cast vulnerability, which allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-12678

Patch from:
eb9ded1206

(From OE-Core rev: 24ac12ecb19efc7c131c9711ba32e298ba860eb7)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-27 22:30:06 +01:00

..

classes

populate_sdk_ext: Add BB_SERVER_TIMEOUT to SDK_LOCAL_CONF_BLACKLIST

2017-08-24 13:48:10 +01:00

conf

default-providers: Add entries for pkgconfig (due to pkg-conf being added)

2017-08-24 13:48:10 +01:00

files

pkgconf: add recipe

2017-08-23 12:06:51 +01:00

lib

core/target/ssh.py: use reader to handle partial data

2017-08-24 13:48:10 +01:00

recipes-bsp

grub2: fix build on gcc where _FORTIFY_SOURCE is defined

2017-08-23 08:47:03 +01:00

recipes-connectivity

connman: Fix for CVE-2017-12865

2017-08-23 08:47:02 +01:00

recipes-core

initramfs-framework/setup-live: quote bootparam_root variable

2017-08-24 13:48:10 +01:00

recipes-devtools

e2fsprogs: fix ptest script

2017-08-27 22:30:06 +01:00

recipes-extended

ghostscript: CVE-2017-9727, -9835, -11714

2017-08-23 08:47:03 +01:00

recipes-gnome

gdk-pixbuf: fix ptest RDEPENDS for multilib build

2017-08-23 08:47:02 +01:00

recipes-graphics

libinput: remove obsolete touchpad patch

2017-08-24 13:48:10 +01:00

recipes-kernel

linux-firmware: package ibt-firmware

2017-08-23 12:06:52 +01:00

recipes-multimedia

tiff: Security fixes

2017-08-23 08:47:03 +01:00

recipes-rt

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

recipes-sato

webkitgtk: disable gobject-introspection on armv7a

2017-08-24 13:48:10 +01:00

recipes-support

taglib: Security fix CVE-2017-12678

2017-08-27 22:30:06 +01:00

site

site/ix86-common: Drop ac_cv_sizeof_ino_t as it can be incorrect with large file support

2017-08-16 00:03:15 +01:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

…

recipes.txt

qt4: remove recipes and classes

2016-01-07 13:40:14 +00:00