diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-01-26 14:05:03 +0100 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@oss.qualcomm.com> | 2026-02-09 09:35:44 +0530 |
| commit | 157b2e377dcf86f5266947d7fd467727d832cd53 (patch) | |
| tree | bcb4232e6e25b81f1f8d752786e760b33040c979 /meta-multimedia/recipes-multimedia | |
| parent | f81e7c9574dc26bb35db3808499702f0e0c052c8 (diff) | |
| download | meta-openembedded-157b2e377dcf86f5266947d7fd467727d832cd53.tar.gz | |
sox: mark CVE-2019-1010004 as patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2019-1010004
The description mentions that this vulnerability overlaps with CVE-2017-18189,
and Debian's investigation[1] confirms that it is solved by the same commit.
Add the ID to the CVE tag of CVE-2017-18189.patch.
[1]: https://security-tracker.debian.org/tracker/CVE-2019-1010004
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-multimedia/recipes-multimedia')
| -rw-r--r-- | meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch b/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch index 3ca829b230..20af7cdada 100644 --- a/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch +++ b/meta-multimedia/recipes-multimedia/sox/sox/CVE-2017-18189.patch | |||
| @@ -8,7 +8,7 @@ into an infinite loop. Prevent this by sanity checking the channel | |||
| 8 | count in open_read(). Also add an upper bound to prevent overflow | 8 | count in open_read(). Also add an upper bound to prevent overflow |
| 9 | in multiplication. | 9 | in multiplication. |
| 10 | 10 | ||
| 11 | CVE: CVE-2017-18189 | 11 | CVE: CVE-2017-18189 CVE-2019-1010004 |
| 12 | Upstream-Status: Backport [https://github.com/mansr/sox/commit/7a8ceb86212b28243bbb6d0de636f0dfbe833e53] | 12 | Upstream-Status: Backport [https://github.com/mansr/sox/commit/7a8ceb86212b28243bbb6d0de636f0dfbe833e53] |
| 13 | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> | 13 | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> |
| 14 | --- | 14 | --- |
