Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2026-04-13T07:10:21+00:00 2026-04-13T07:10:21+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2026-04-09T07:09:19+00:00 urn:sha1:964432f3af767094c2c1a65d0f7170385581e586 Vulnerability exists in the function which was added in version 0.22.0[1] Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5318 [1] https://github.com/LibRaw/LibRaw/commit/12b0e5d60c57bb795382fda8494fc45f683550b8 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-10-30T06:43:34+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2025-10-10T01:25:13+00:00 urn:sha1:e9af1614d1d3bd6da0b8128d8cb7d33f74be8797 Details https://nvd.nist.gov/vuln/detail/CVE-2025-43964 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit 95f680e0df1844b259cb07d6668bf381439f784f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-10-30T06:43:34+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2025-10-10T01:25:12+00:00 urn:sha1:7c56524a8d889a6d52ff0062dd534944497a2adc Details https://nvd.nist.gov/vuln/detail/CVE-2025-43963 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit 287ed36b866adf46b0ec6245947da64531a98fa2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2025-10-30T06:43:34+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2025-10-10T01:25:11+00:00 urn:sha1:a8c196797610a2684eafd38864d71a1c0418b565 Details - https://nvd.nist.gov/vuln/detail/CVE-2025-43961 - https://nvd.nist.gov/vuln/detail/CVE-2025-43962 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit 337ab48ff821561af4786ee3c111dc6f81236505) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2024-01-09T03:54:42+00:00 Wang Mingyu wangmy@fujitsu.com 2024-01-08T13:25:18+00:00 urn:sha1:204e694ac275b537502d7ddcfce723b8b9eff128 Changelog ======== * New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB: limits allocation/read size for embedded color profile (default: 256Mb) * Embedded color profile allocation/read size: limited by input file size. * Multiple fixes (mostly inspired by oss-fuzz) to improve library stability and/or input checks. * raw-identify: use fallback if PATH_MAX not available * Disabled color conversion for Canon 16-bit thumbnails * docs/changelog: explained the case when no thumbnail is found in specific file * swapXX renamed to libraw_swapXX to avoid name conflict * better striped thumbnails handling Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-06T16:47:08+00:00 Khem Raj raj.khem@gmail.com 2023-11-04T00:19:21+00:00 urn:sha1:a651f50385bf177a795f87b7c8b102164ae187bf License-Update: Copyright years changed Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-03-05T01:41:45+00:00 Khem Raj raj.khem@gmail.com 2022-03-04T08:44:20+00:00 urn:sha1:14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295 Signed-off-by: Khem Raj <raj.khem@gmail.com> 2021-11-03T13:57:49+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2021-11-02T23:06:48+00:00 urn:sha1:b402a3076fbafe05d0b8621e50603b65c3fe8147 This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2021-05-17T16:00:36+00:00 Khem Raj raj.khem@gmail.com 2021-05-16T01:11:43+00:00 urn:sha1:ea0af875cae2e182c72887a78319e885da26760e Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Andreas Müller <schnitzeltony@gmail.com>