Jackie Huang df8c138772 libsndfile1: Fix CVE-2017-8363 ...

Backport the patch to fix CVE-2017-8363:

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows
remote attackers to cause a denial of service (heap-based buffer
over-read and application crash) via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-8363

(From OE-Core rev: 9cc9956c5ed09f9016cb23bd763652e5ab55f3cd)

(From OE-Core rev: 201fa8f6a10469886db6d48c3a3e91712382e561)

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-09-11 22:15:58 +01:00

..

classes

package.bbclass: Restore functionality to detect RPM dependencies

2017-08-31 17:57:12 +01:00

conf

v86d, qemuboot-x86.inc: use KERNEL_MODULE_AUTOLOAD+KERNEL_MODULE_PROBECONF for uvesafb instead of fbsetup init script

2017-08-29 11:57:28 +01:00

files

ext-sdk-prepare.py: use quiet mode when preparing sysroot

2017-04-19 10:38:37 +01:00

lib

package.bbclass: Restore functionality to detect RPM dependencies

2017-08-31 17:57:12 +01:00

recipes-bsp

gnu-efi: Fix build with gcc7

2017-08-29 11:57:29 +01:00

recipes-connectivity

bind: Use correct python interpreter path

2017-08-31 17:57:12 +01:00

recipes-core

expat: Don't use getrandom() in the -native case

2017-09-11 22:15:58 +01:00

recipes-devtools

ruby: fix CVE-2017-922{6-9}

2017-09-11 22:15:58 +01:00

recipes-extended

wget: Security fix CVE-2017-6508

2017-09-11 22:15:58 +01:00

recipes-gnome

gtk+3: Update the patches to work with old versions of patch

2017-08-31 17:57:11 +01:00

recipes-graphics

xserver-xorg: Fix CVE-2017-10971

2017-09-11 22:15:58 +01:00

recipes-kernel

systemtap: ensure systemtap-native is available

2017-08-29 11:57:29 +01:00

recipes-lsb4

libpng12: Use rm instead of unlink

2017-03-10 14:50:11 +00:00

recipes-multimedia

libsndfile1: Fix CVE-2017-8363

2017-09-11 22:15:58 +01:00

recipes-rt

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

recipes-sato

webkitgtk: Fix build on aarch64

2017-03-17 16:53:05 +00:00

recipes-support

nspr: Fix build error due to missing stdint.h> include

2017-09-06 17:13:19 +01:00

site

siteinfo.bbclass: Add mipsisa{32, 64}r6{el, } support

2016-10-07 16:43:57 +01:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

…

recipes.txt

qt4: remove recipes and classes

2016-01-07 13:40:14 +00:00