Peter Marko ea30165e8b libpng: patch CVE-2025-64720 ...

Pick commit per NVD report.

(From OE-Core rev: e8fbb7521e0113c467e07ba473a46612709c5311)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-12-05 07:13:42 -08:00

..

alsa

alsa-utils: upgrade 1.2.10 -> 1.2.11

2024-02-08 23:14:51 +00:00

ffmpeg

ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases

2025-10-13 12:42:58 -07:00

flac

flac: fix buildpaths warnings

2024-07-12 05:47:20 -07:00

gstreamer

gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs

2025-11-03 07:17:02 -08:00

lame

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

liba52

liba52: fix do_fetch error

2024-10-30 08:30:00 -07:00

libogg

libogg: upgrade 1.3.4 -> 1.3.5

2021-06-12 22:54:14 +01:00

libomxil

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libpng

libpng: patch CVE-2025-64720

2025-12-05 07:13:42 -08:00

libsamplerate

meta: fix version checks in all github recipes using the github-releases class

2022-09-28 08:01:10 +01:00

libsndfile

libsndfile: fix CVE-2024-50612

2024-12-06 05:50:25 -08:00

libtheora

recipes: Drop remaining PR values from recipes

2023-09-22 07:45:17 +01:00

libtiff

tiff: ignore CVE-2025-8961

2025-11-03 07:17:02 -08:00

libvorbis

vorbis: mark patch as Inactive-Upstream

2024-07-17 05:36:14 -07:00

mpeg2dec

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

mpg123

mpg123: upgrade 1.32.6 -> 1.32.10

2025-03-19 07:25:56 -07:00

pulseaudio

pulseaudio: ignore CVE-2024-11586

2025-10-13 12:42:58 -07:00

sbc

sbc: upgrade 1.5 -> 2.0

2022-06-22 22:40:28 +01:00

speex

speexdsp: enable native variant

2024-01-07 12:24:57 +00:00

webp

libwebp: upgrade to 1.3.2

2023-09-20 08:57:27 +01:00

x264

recipes/classes/scripts: Drop SRCPV usage in OE-Core

2023-08-24 16:50:24 +01:00