Yi Zhao 075b333e3d tiff: Security fix CVE-2016-3632 ...

CVE-2016-3632 libtiff: The _TIFFVGetField function in tif_dirinfo.c in
LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of
service (out-of-bounds write) or execute arbitrary code via a crafted
TIFF image.

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3632
http://bugzilla.maptools.org/show_bug.cgi?id=2549
https://bugzilla.redhat.com/show_bug.cgi?id=1325095

The patch is from RHEL7.

(From OE-Core rev: 9206c86239717718be840a32724fd1c190929370)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-11-23 11:10:15 +00:00

..

alsa

alsa-utils: enable optional building of manpages

2016-10-28 16:15:20 +01:00

ffmpeg

ffmpeg: update to 3.2

2016-11-06 23:35:33 +00:00

flac

flac: upgrade to 1.3.1

2015-02-08 08:00:29 +00:00

gstreamer

gstreamer-plugins: Move introspection to individual recipes

2016-11-06 23:35:32 +00:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: Upgrade 1.6.24 -> 1.6.25

2016-11-06 23:35:35 +00:00

libsamplerate

libsamplerate0: clean up dependencies

2016-11-06 23:35:36 +00:00

libsndfile

libsndfile1: 1.0.26 -> 1.0.27

2016-07-26 08:56:27 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fix CVE-2016-3632

2016-11-23 11:10:15 +00:00

libvorbis

libvorbis: remove legacy options

2015-09-03 12:43:20 +01:00

mpeg2dec

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

mpg123

mpg123: update to 1.23.8

2016-10-28 16:15:18 +01:00

pulseaudio

pulseaudio: enable optional building of manpages

2016-10-28 16:15:20 +01:00

sbc

sbc: upgrade to 1.3

2014-11-20 14:08:08 +00:00

speex

speex: 1.2rc1 -> 1.2rc2

2015-07-16 15:09:15 +01:00

tremor

upstream_tracking.inc: deprecate and move contents to recipes

2015-09-01 11:44:01 +01:00

webp

libwebp: sepcify neon availability for arm

2016-09-09 11:53:36 +01:00

x264

x264: Update to latest on stable branch

2016-11-15 15:19:54 +00:00