Li Zhou 49f6a9e794 libtiff: Security Advisory - libtiff - CVE-2017-5225 ...

Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

(From OE-Core rev: 434990304bdfb70441b399ff8998dbe3fe1b1e1f)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-01-31 14:43:01 +00:00

..

alsa

alsa-tools: 1.1.0 -> 1.1.3

2017-01-23 12:05:21 +00:00

ffmpeg

ffmpeg: disable asm for x32

2017-01-09 13:39:12 +00:00

flac

flac: 1.3.1 -> 1.3.2

2017-01-23 12:05:21 +00:00

gstreamer

gstreamer1.0-plugins-base: disable ivorbis

2017-01-26 10:44:27 +00:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: Upgrade 1.6.26 -> 1.6.28

2017-01-26 10:44:28 +00:00

libsamplerate

libsamplerate0: clean up dependencies

2016-11-06 23:35:36 +00:00

libsndfile

libsndfile1: 1.0.26 -> 1.0.27

2016-07-26 08:56:27 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

libtiff: Security Advisory - libtiff - CVE-2017-5225

2017-01-31 14:43:01 +00:00

libvorbis

libvorbis: remove legacy options

2015-09-03 12:43:20 +01:00

mpeg2dec

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

mpg123

mpg123: update to 1.23.8

2016-10-28 16:15:18 +01:00

pulseaudio

pulseaudio: enable optional building of manpages

2016-10-28 16:15:20 +01:00

sbc

sbc: upgrade to 1.3

2014-11-20 14:08:08 +00:00

speex

speex: 1.2rc1 -> 1.2rc2

2015-07-16 15:09:15 +01:00

tremor

tremor: Use mirror tarball instead of svn url

2017-01-23 22:38:49 +00:00

webp

libwebp: sepcify neon availability for arm

2016-09-09 11:53:36 +01:00

x264

x264: for x32, disable asm and pass -mx32

2017-01-09 13:39:12 +00:00