diff options
author | Pawan <badganchipv@gmail.com> | 2023-10-16 13:51:23 +0530 |
---|---|---|
committer | Steve Sakoman <steve@sakoman.com> | 2023-10-20 05:35:30 -1000 |
commit | 2f34ea89dbe5bc0322156729b2fe4f7c35199bd0 (patch) | |
tree | 1f0ed1dd8a125d70d0fe7ed6b6931f2546d8ee98 | |
parent | aa99487732ab1ae453becdda08a3e72de0b7b269 (diff) | |
download | poky-2f34ea89dbe5bc0322156729b2fe4f7c35199bd0.tar.gz |
libwebp: Update CVE ID CVE-2023-4863
Notice that it references different CVE id:
https://nvd.nist.gov/vuln/detail/CVE-2023-5129
which was marked as a rejected duplicate of:
https://nvd.nist.gov/vuln/detail/CVE-2023-4863
but it's the same issue. Hence update CVE ID CVE-2023-4863
to CVE-2023-5129.patch.
(From OE-Core rev: 7dce529515baa843ba3e5c89b2ad605b9845c59b)
Signed-off-by: Pawan <badganchipv@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
-rw-r--r-- | meta/recipes-multimedia/webp/files/CVE-2023-5129.patch | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/meta/recipes-multimedia/webp/files/CVE-2023-5129.patch b/meta/recipes-multimedia/webp/files/CVE-2023-5129.patch index eb77e193c2..ffff068c56 100644 --- a/meta/recipes-multimedia/webp/files/CVE-2023-5129.patch +++ b/meta/recipes-multimedia/webp/files/CVE-2023-5129.patch | |||
@@ -12,9 +12,16 @@ codes) streams are still decodable. | |||
12 | Bug: chromium:1479274 | 12 | Bug: chromium:1479274 |
13 | Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741 | 13 | Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741 |
14 | 14 | ||
15 | CVE: CVE-2023-5129 | 15 | Notice that it references different CVE id: |
16 | https://nvd.nist.gov/vuln/detail/CVE-2023-5129 | ||
17 | which was marked as a rejected duplicate of: | ||
18 | https://nvd.nist.gov/vuln/detail/CVE-2023-4863 | ||
19 | but it's the same issue. Hence update CVE ID CVE-2023-4863 | ||
20 | |||
21 | CVE: CVE-2023-5129 CVE-2023-4863 | ||
16 | Upstream-Status: Backport [https://github.com/webmproject/libwebp/commit/2af26267cdfcb63a88e5c74a85927a12d6ca1d76] | 22 | Upstream-Status: Backport [https://github.com/webmproject/libwebp/commit/2af26267cdfcb63a88e5c74a85927a12d6ca1d76] |
17 | Signed-off-by: Colin McAllister <colinmca242@gmail.com> | 23 | Signed-off-by: Colin McAllister <colinmca242@gmail.com> |
24 | Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com> | ||
18 | --- | 25 | --- |
19 | src/dec/vp8l_dec.c | 46 ++++++++++--------- | 26 | src/dec/vp8l_dec.c | 46 ++++++++++--------- |
20 | src/dec/vp8li_dec.h | 2 +- | 27 | src/dec/vp8li_dec.h | 2 +- |