Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=master 2015-05-20T20:41:08+00:00 2015-05-20T20:41:08+00:00 Alexander Kanavin alex.kanavin@gmail.com 2015-05-18T13:58:40+00:00 urn:sha1:f8232d79aff4fa419c2a0e7ccae38615c9c1157a gstreamer 0.10 is still available from meta-openembedded/meta-multimedia See also https://bugzilla.yoctoproject.org/show_bug.cgi?id=6294 http://lists.openembedded.org/pipermail/openembedded-core/2015-April/104276.html (From OE-Core rev: fe44ac167a2a76531af3519f3889fce92024567b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2014-11-25T13:03:28+00:00 Roy Li rongqing.li@windriver.com 2014-11-19T03:02:11+00:00 urn:sha1:3fc5cfe3dd4e8cf966990671c834df6562525179 Issue: LIN7-1755 Issue: LIN7-1739 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8541 libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted MJPEG data. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8548 Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data. (From OE-Core rev: 4bd50c5a967af2b8f0fe77b8f9c100169e4fc531) Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>