Zheng Qiu fc1c036d4a tiff: fix CVE-2022-2953 ...

While this does not happen with the tiff 4.3.0 release, it does happen with
the series of patches we have, so backport the two simple changes that
restrict the tiffcrop options to avoid the vulnerability.

CVE-2022-2953.patch was taken from upstream, and a small typo was fixed
for the CVE number. The other patch is included in tiff 4.4.0 but not
4.3.0, so add it as well.

(From OE-Core rev: cd94ed01214251027d1076b67cf65c3058f51dad)

Signed-off-by: Randy MacLeod <randy.macleod@windriver.com>
Signed-off-by: Zheng Qiu <zheng.qiu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-11-04 13:13:31 +00:00

..

alsa

alsa-plugins: fix libavtp vs. avtp packageconfig

2022-06-11 10:06:13 +01:00

ffmpeg

ffmpeg: upgrade 5.0 -> 5.0.1

2022-05-20 10:08:06 +01:00

flac

flac: upgrade 1.3.3 -> 1.3.4

2022-02-25 12:41:24 +00:00

gstreamer

gstreamer1.0-vaapi: upgrade 1.20.2 -> 1.20.3

2022-07-16 06:52:45 +01:00

lame

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

liba52

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libogg

libogg: upgrade 1.3.4 -> 1.3.5

2021-06-12 22:54:14 +01:00

libomxil

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libpng

libpng: upgrade 1.6.37 -> 1.6.38

2022-09-28 08:02:10 +01:00

libsamplerate

libsamplerate0: update 0.1.9 -> 0.2.2

2021-11-21 11:05:01 +00:00

libsndfile

libsndfile: Fix missing external library support

2022-03-04 17:14:15 +00:00

libtheora

libtheora: Clarify BSD license variant

2019-10-15 14:16:11 +01:00

libtiff

tiff: fix CVE-2022-2953

2022-11-04 13:13:31 +00:00

libvorbis

meta: fix some unresponsive homepages and bugtracker links

2020-10-30 13:22:48 +00:00

mpeg2dec

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

mpg123

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

pulseaudio

pulseaudio: add m4-native to DEPENDS

2022-07-25 15:11:46 +01:00

sbc

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

speex

speex: fix CVE-2020-23903

2022-01-17 11:49:12 +00:00

webp

libwebp: upgrade 1.2.3 -> 1.2.4

2022-08-31 16:54:17 +01:00

x264

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00