summaryrefslogtreecommitdiffstats
path: root/meta-multimedia/recipes-multimedia
diff options
context:
space:
mode:
authorGyorgy Sarvari <skandigraun@gmail.com>2026-01-26 14:05:03 +0100
committerAnuj Mittal <anuj.mittal@oss.qualcomm.com>2026-02-09 09:35:44 +0530
commit157b2e377dcf86f5266947d7fd467727d832cd53 (patch)
treebcb4232e6e25b81f1f8d752786e760b33040c979 /meta-multimedia/recipes-multimedia
parentf81e7c9574dc26bb35db3808499702f0e0c052c8 (diff)
downloadmeta-openembedded-157b2e377dcf86f5266947d7fd467727d832cd53.tar.gz
sox: mark CVE-2019-1010004 as patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2019-1010004 The description mentions that this vulnerability overlaps with CVE-2017-18189, and Debian's investigation[1] confirms that it is solved by the same commit. Add the ID to the CVE tag of CVE-2017-18189.patch. [1]: https://security-tracker.debian.org/tracker/CVE-2019-1010004 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-multimedia/recipes-multimedia')
-rw-r--r--meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch b/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch
index 3ca829b230..20af7cdada 100644
--- a/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch
+++ b/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch
@@ -8,7 +8,7 @@ into an infinite loop. Prevent this by sanity checking the channel
8count in open_read(). Also add an upper bound to prevent overflow 8count in open_read(). Also add an upper bound to prevent overflow
9in multiplication. 9in multiplication.
10 10
11CVE: CVE-2017-18189 11CVE: CVE-2017-18189 CVE-2019-1010004
12Upstream-Status: Backport [https://github.com/mansr/sox/commit/7a8ceb86212b28243bbb6d0de636f0dfbe833e53] 12Upstream-Status: Backport [https://github.com/mansr/sox/commit/7a8ceb86212b28243bbb6d0de636f0dfbe833e53]
13Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> 13Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
14--- 14---