Shan Hai 0685207d43 pulseaudio: fix CVE-2014-3970 ...

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module
in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of
service (assertion failure and abort) via an empty UDP packet.

Fix it by picking a patch from pulseaudio upstream code.

(From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd)

Signed-off-by: Shan Hai <shan.hai@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-07-29 09:58:26 +01:00

..

alsa

alsa-lib: remove non PN based -dev packages

2014-07-25 16:54:42 +01:00

flac

flac: explicitly disable checking for nasm

2014-07-17 12:36:19 +01:00

gstreamer

gstreamer1.0-plugins-good: add missing dependency on libcap

2014-07-25 15:34:00 +01:00

lame

lame: Add missing DEPENDS on gettext-native

2014-06-03 16:49:19 +01:00

liba52

Tweak SUMMARY

2014-01-02 22:39:23 +00:00

libav

libav: fix PACKAGECONFIG for theora and libvorbis

2014-07-29 09:58:26 +01:00

libid3tag

libid3tag: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libmad

libmad: use "foreign" automake strictness

2014-07-16 10:31:16 +01:00

libogg

libogg: upgrade to 1.3.2

2014-06-01 14:29:31 +01:00

libomxil

libomxil-0.9.3: Remove versioning for bellagio .so files.

2014-07-25 15:33:58 +01:00

libpng

binconfig-disabled: Add class and use

2014-06-16 15:31:40 +01:00

libsamplerate

libsamplerate0: add HOMEPAGE

2014-01-02 12:50:19 +00:00

libsndfile

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

libtheora

Upstream-Status: Add Upstream-Status for some missing patches

2011-07-26 15:48:08 +01:00

libtiff

libtiff: Security Advisory - CVE-2012-4564

2014-06-17 10:23:53 +01:00

libvorbis

libvorbis: upgrade to 1.3.4

2014-02-20 14:28:11 +00:00

mpeg2dec

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

pulseaudio

pulseaudio: fix CVE-2014-3970

2014-07-29 09:58:26 +01:00

sbc

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

speex

speex: configure in float or fixed mode based on TARGET_FPU

2014-01-28 00:52:32 +00:00

tremor

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

x264

x264: Update SRCREV to match commit in upstream git repo

2014-06-03 16:49:20 +01:00