Peter Marko 01a3d9d7ae libtheora: mark CVE-2024-56431 as not vulnerable yet ...

CVE patch [1] aplies only on main branch which is base for 1.2.x.
Branch 1.1 has a different initial commit and does not contain
vulnerable code where the CVE patch applies.

Also Debian [2] marked 1.1 as not vulnerable.

[1] 5665f86b8f
[2] https://security-tracker.debian.org/tracker/CVE-2024-56431

(From OE-Core rev: 07f35d022b88ab4d297d0252f9909e252b7e4cfe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2026-02-27 17:45:07 +00:00

..

libtheora-1.1.1

Upstream-Status: Add Upstream-Status for some missing patches

2011-07-26 15:48:08 +01:00

libtheora_1.1.1.bb

libtheora: mark CVE-2024-56431 as not vulnerable yet

2026-02-27 17:45:07 +00:00