Li Zhou b35a4b34dd libtiff: Security Advisory - libtiff - CVE-2017-5225 ...

Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

(From OE-Core rev: 434990304bdfb70441b399ff8998dbe3fe1b1e1f)

(From OE-Core rev: d26ea3b9b698fcb059aaa34c2408e3b95ca4f31d)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-11-21 14:43:53 +00:00

..

alsa

alsa-lib: allow building ARM thumb again

2016-10-05 10:10:11 +01:00

ffmpeg

ffmpeg: update to 3.1.3

2016-09-03 09:58:39 +01:00

flac

flac: upgrade to 1.3.1

2015-02-08 08:00:29 +00:00

gstreamer

Revert "gst-player: Disable visualizations"

2016-10-05 10:10:11 +01:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: use SourceForge mirror

2017-10-10 17:27:40 +01:00

libsamplerate

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libsndfile

libsndfile1: 1.0.26 -> 1.0.27

2016-07-26 08:56:27 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

libtiff: Security Advisory - libtiff - CVE-2017-5225

2017-11-21 14:43:53 +00:00

libvorbis

libvorbis: remove legacy options

2015-09-03 12:43:20 +01:00

mpeg2dec

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

mpg123

mpg123: update to 1.23.6

2016-09-03 09:58:38 +01:00

pulseaudio

pulseaudio: add ${S}/LICENSE to LIC_FILES_CHKSUM

2016-09-16 15:24:03 +01:00

sbc

sbc: upgrade to 1.3

2014-11-20 14:08:08 +00:00

speex

speex: 1.2rc1 -> 1.2rc2

2015-07-16 15:09:15 +01:00

tremor

upstream_tracking.inc: deprecate and move contents to recipes

2015-09-01 11:44:01 +01:00

webp

libwebp: sepcify neon availability for arm

2016-09-09 11:53:36 +01:00

x264

x264: add textrel to INSANE_SKIP

2016-09-22 11:13:24 +01:00