Yi Zhao a602b9f748 taglib: Security fix CVE-2017-12678 ...

CVE-2017-12678: In TagLib 1.11.1, the rebuildAggregateFrames function in
id3v2framefactory.cpp has a pointer to cast vulnerability, which allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-12678

Patch from:
eb9ded1206

(From OE-Core rev: 24ac12ecb19efc7c131c9711ba32e298ba860eb7)

(From OE-Core rev: bb90e08fbcbc7c60731aacdc4b82163507d9afdc)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-09-11 22:15:58 +01:00

..

apr

apr: fix rss+perf+gold failure on do_compile_ptest_base

2017-03-08 11:52:56 +00:00

argp-standalone

argp-standalone: set SUMMARY instead of DESCRIPTION

2016-05-30 15:58:10 +01:00

aspell

meta: more removals of redunant FILES_${PN}-dbg

2015-12-16 11:56:30 +00:00

atk

at-spi2-atk: depend on glib-2.0-native

2017-01-31 15:25:56 +00:00

attr

acl: fix race issue when do_compile

2017-04-19 10:18:43 +01:00

bash-completion

bash-completion: update to 2.5

2017-03-01 23:27:08 +00:00

bdwgc

bdwgc: Add missing include to avoid musl build failures

2016-09-03 09:58:38 +01:00

beecrypt

beecrypt: add option --with-dev-dsp

2014-11-12 15:38:30 +00:00

bmap-tools

bmap-tools: initial commit, version 3.2

2016-05-14 23:05:14 +01:00

boost

boost: fix upstream version check

2017-04-29 11:17:23 +01:00

ca-certificates

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

consolekit

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

curl

curl: upgrade to 7.53.1

2017-03-11 16:09:14 +00:00

db

db: Fix atomic function namespace clash with clang builtins

2017-03-24 23:43:32 +00:00

debianutils

which: fix it so the manpage will respect alternatives

2017-03-17 16:53:04 +00:00

enchant

enchant: add PACKAGECONFIG for *spell

2016-09-20 15:11:08 +01:00

gdbm

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

gmp

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

gnome-desktop-testing

gnome-desktop-testing: fix ptest output format

2015-11-16 11:39:33 +00:00

gnupg

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

gnutls

libtasn1: CVE-2017-10790

2017-09-11 22:15:58 +01:00

gpgme

gpgme: add a dependency on python-unixadmin to Python bindings package

2017-04-14 09:47:08 +01:00

icu

icu: Fix build with glibc 2.26

2017-09-06 17:13:19 +01:00

iso-codes

iso-codes: update to 3.74

2017-03-01 23:27:08 +00:00

libassuan

nativesdk-packagegroup-sdk-host: replace smartpm with dnf

2017-03-14 14:42:17 +00:00

libatomic-ops

libatomic-ops: upgrade to 7.4.4

2016-07-10 14:12:16 +01:00

libbsd

libbsd: libbsd-overlay.pc: Set Cflags to use -I instead of -isystem

2017-02-05 09:22:16 +00:00

libcap

libcap: drop obsolete attr PACKAGECONFIG option and libattr dependency

2017-04-29 11:17:23 +01:00

libcap-ng

libcap-ng: 0.7.7 -> 0.7.8

2016-08-04 15:22:23 +01:00

libcheck

libcheck: fix file-rdeps QA issue

2017-08-31 17:57:12 +01:00

libcroco

libcroco: upgrade to 0.6.11

2016-01-18 11:47:04 +00:00

libdaemon

libdaemon: Explicitly include unisttd.h instead of sys/unistd.h

2015-04-10 18:10:26 +01:00

libevdev

libevdev: Upgrade 1.5.4 -> 1.5.6

2017-01-26 10:44:28 +00:00

libevent

libevent: update ptests fail condition

2016-08-10 10:46:30 +01:00

libexif

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libffi

libffi: backport patch to fix building MIPS soft float

2016-09-08 00:32:43 +01:00

libfm

libfm: fix configure error if native vala is absent

2016-12-17 09:57:04 +00:00

libgcrypt

libgcrypt: fix CVE-2017-7526

2017-07-19 11:30:22 +01:00

libgpg-error

libgpg-error: Don't replace the syscfg header for mingw32

2017-03-04 23:18:19 +00:00

libical

libical: fix build failure after changing machine

2016-09-14 22:22:07 +01:00

libiconv

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

libksba

libksba: update to 1.3.5

2016-10-28 16:15:18 +01:00

libmpc

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libnl

libnl: update to 3.2.29

2017-03-01 23:27:09 +00:00

libpcre

libpcre2_10.23.bb: set CVE_PRODUCT to pcre2

2017-08-29 11:57:27 +01:00

libproxy

libproxy: speed up upstream version check

2017-04-29 11:17:23 +01:00

libsoup

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

libunistring

libunistring: Update version 0.9.6 -> 0.9.7

2016-12-17 09:57:03 +00:00

libunwind

libunwind: apply a patch to fix x32

2017-01-09 13:39:13 +00:00

liburcu

liburcu: update to 0.9.3

2016-12-17 09:57:03 +00:00

libusb

libusb1: upgrade 1.0.20 -> 1.0.21

2017-03-01 23:27:10 +00:00

libxslt

libxslt: Fix CVE-2017-5029

2017-06-05 23:30:22 +01:00

libyaml

libyaml: Enable nativesdk bake

2016-11-15 15:19:53 +00:00

lz4

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

lzo

lzo: update ptest output format

2016-08-10 10:46:31 +01:00

lzop

meta: do not append to BBCLASSEXTEND

2017-03-10 14:50:11 +00:00

mpfr

mpfr: 3.1.4 -> 3.1.5

2016-12-13 22:55:19 +00:00

neon

neon: Upgrade 0.30.1 -> 0.30.2

2016-11-06 23:35:34 +00:00

nettle

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

npth

npth: update to 1.3

2016-11-30 15:48:09 +00:00

nspr

nspr: Fix build error due to missing stdint.h> include

2017-09-06 17:13:19 +01:00

nss

nss: update to 3.28.1

2017-03-01 23:27:09 +00:00

nss-myhostname

nss-myhostname: Fix build on musl

2016-02-04 23:39:02 +00:00

p11-kit

p11-kit: enable gtk-doc

2016-09-09 12:12:23 +01:00

pinentry

gnupg.org-hosted recipes: Change SRC_URI to https site

2016-05-30 15:58:13 +01:00

popt

meta: update patch metadata

2016-07-08 09:57:24 +01:00

ptest-runner

ptest-runner: Upgrade to minor version 2.0.2

2017-04-11 18:10:18 +01:00

rng-tools

rng-tools: use SOURCEFORGE_MIRROR in SRC_URI

2016-11-30 15:48:09 +00:00

serf

serf: Update to version 1.3.9

2016-11-15 15:19:53 +00:00

shared-mime-info

shared-mime-info 1.6 -> 1.8

2016-12-22 08:50:17 +00:00

source-highlight

source-highlight: use with-boost-libdir

2016-10-15 10:01:43 +01:00

sqlite

sqlite3.inc: set CVE_PRODUCT to sqlite

2017-08-29 11:57:28 +01:00

taglib

taglib: Security fix CVE-2017-12678

2017-09-11 22:15:58 +01:00

user-creation

xuser-account: remove GROUPADD_PARAM

2016-07-20 10:28:51 +01:00

vte

vte: Upgrade 0.44.2 -> 0.46.1

2017-02-23 12:49:49 -08:00