diff options
| author | Peter Marko <peter.marko@siemens.com> | 2024-12-24 13:44:13 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2024-12-24 08:23:09 -0800 |
| commit | d7758a8d0cf509e2d8db941ca4fd855c39beaafb (patch) | |
| tree | e660ba9ce3735618225be60f037b11040c5d10c4 | |
| parent | 59d3949e3ed673bd049aadfd2238213b550f1461 (diff) | |
| download | meta-openembedded-d7758a8d0cf509e2d8db941ca4fd855c39beaafb.tar.gz | |
rtmpdump: mark CVE-2015-8270, CVE-2015-8271 and CVE-2015-8272 as fixed
This CVE is marked as fixed by Debian.
Extracting Debian jessie Debian sources [1] shows 4 commits uses for
backports. All these commits are already included in current hash
([2]-[5]).
../tmp/work/core2-64-poky-linux/rtmpdump/2.4/git$ git log | grep 'commit \(10b580aabcec1621b25518271ba1ab2b018be88e\|...\|4312322107a94c81d3ec5b98f91bc6b923551dc5\)'
commit 530f9bb2a02a78c1198fb2bf0293a12d225e4691
commit 4312322107a94c81d3ec5b98f91bc6b923551dc5
commit 39ec7eda489717d503bc4cbfaa591c93205695b6
commit 10b580aabcec1621b25518271ba1ab2b018be88e
[1] https://snapshot.debian.org/archive/debian/20170704T094954Z/pool/main/r/rtmpdump/rtmpdump_2.4%2B20150115.gita107cef-1%2Bdeb8u1.debian.tar.xz
[2] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/10b580aabcec1621b25518271ba1ab2b018be88e
[3] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/39ec7eda489717d503bc4cbfaa591c93205695b6
[4] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/530f9bb2a02a78c1198fb2bf0293a12d225e4691
[5] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/4312322107a94c81d3ec5b98f91bc6b923551dc5
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
| -rw-r--r-- | meta-multimedia/recipes-multimedia/rtmpdump/rtmpdump_2.4.bb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-multimedia/recipes-multimedia/rtmpdump/rtmpdump_2.4.bb b/meta-multimedia/recipes-multimedia/rtmpdump/rtmpdump_2.4.bb index aa92c58808..47d04af9c1 100644 --- a/meta-multimedia/recipes-multimedia/rtmpdump/rtmpdump_2.4.bb +++ b/meta-multimedia/recipes-multimedia/rtmpdump/rtmpdump_2.4.bb | |||
| @@ -14,6 +14,10 @@ SRC_URI = " \ | |||
| 14 | 14 | ||
| 15 | S = "${WORKDIR}/git" | 15 | S = "${WORKDIR}/git" |
| 16 | 16 | ||
| 17 | CVE_STATUS_GROUPS += "CVES_2015" | ||
| 18 | CVES_2015 = "CVE-2015-8270 CVE-2015-8271 CVE-2015-8272" | ||
| 19 | CVES_2015[status] = "fixed-version: patched in current git hash" | ||
| 20 | |||
| 17 | inherit autotools-brokensep | 21 | inherit autotools-brokensep |
| 18 | 22 | ||
| 19 | EXTRA_OEMAKE = " \ | 23 | EXTRA_OEMAKE = " \ |
