diff options
author | Sona Sarmadi <sona.sarmadi@enea.com> | 2016-03-15 07:17:13 +0100 |
---|---|---|
committer | Paul Vaduva <Paul.Vaduva@enea.com> | 2016-03-17 13:27:37 +0100 |
commit | e556bbcee03a7ffab00b3748f3370be7f915c772 (patch) | |
tree | 24289fc33e88e2e2c7bfffd5a7c953568cb84ae0 /meta/recipes-multimedia/libpng/libpng_1.6.13.bb | |
parent | 0b13cc2376a5bf69fcbf809ddad8a4bf928970be (diff) | |
download | poky-e556bbcee03a7ffab00b3748f3370be7f915c772.tar.gz |
libpng: CVE-2015-8126
Fixes buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions
References:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-8126
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126
Upstream patches:
https://github.com/glennrp/libpng/commit/81f44665cce4cb1373f049a76f3904e981b7a766
https://github.com/glennrp/libpng/commit/a901eb3ce6087e0afeef988247f1a1aa208cb54d
https://github.com/glennrp/libpng/commit/1bef8e97995c33123665582e57d3ed40b57d5978
https://github.com/glennrp/libpng/commit/83f4c735c88e7f451541c1528d8043c31ba3b466
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Paul Vaduva <Paul.Vaduva@enea.com>
Diffstat (limited to 'meta/recipes-multimedia/libpng/libpng_1.6.13.bb')
-rw-r--r-- | meta/recipes-multimedia/libpng/libpng_1.6.13.bb | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.13.bb b/meta/recipes-multimedia/libpng/libpng_1.6.13.bb index 3d32bfea2c..80dcc0a63f 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.13.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.13.bb | |||
@@ -10,6 +10,12 @@ LIBV = "16" | |||
10 | 10 | ||
11 | SRC_URI = "${SOURCEFORGE_MIRROR}/project/libpng/libpng${LIBV}/${PV}/libpng-${PV}.tar.xz \ | 11 | SRC_URI = "${SOURCEFORGE_MIRROR}/project/libpng/libpng${LIBV}/${PV}/libpng-${PV}.tar.xz \ |
12 | " | 12 | " |
13 | SRC_URI += "\ | ||
14 | file://CVE-2015-8126_1.patch \ | ||
15 | file://CVE-2015-8126_2.patch \ | ||
16 | file://CVE-2015-8126_3.patch \ | ||
17 | file://CVE-2015-8126_4.patch \ | ||
18 | " | ||
13 | 19 | ||
14 | SRC_URI[md5sum] = "9822c25466f060142359f80ed142c9e5" | 20 | SRC_URI[md5sum] = "9822c25466f060142359f80ed142c9e5" |
15 | SRC_URI[sha256sum] = "d9c8ce54a5fc8052ed794ca65b553384a74c0608b09ae163cbbb07176018e625" | 21 | SRC_URI[sha256sum] = "d9c8ce54a5fc8052ed794ca65b553384a74c0608b09ae163cbbb07176018e625" |