Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=pyro-enea 2017-09-11T21:15:58+00:00 2017-09-11T21:15:58+00:00 Jackie Huang jackie.huang@windriver.com 2017-08-17T06:44:29+00:00 urn:sha1:df8c138772f478c3f02a2985730d17d080673fcd Backport the patch to fix CVE-2017-8363: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8363 (From OE-Core rev: 9cc9956c5ed09f9016cb23bd763652e5ab55f3cd) (From OE-Core rev: 201fa8f6a10469886db6d48c3a3e91712382e561) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-09-11T21:15:58+00:00 Jackie Huang jackie.huang@windriver.com 2017-08-17T06:44:28+00:00 urn:sha1:2cc6f0ba68db4c11532def5f205733063f7c689f Backport the patch to fix CVE-2017-8362: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8362 (From OE-Core rev: 0c8da3f6f85962196f2ad54fffd839239f5c2274) (From OE-Core rev: eec5e5ce04cfbd1e41e54be31afee72ecc9ec5dd) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> with minor changes Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-09-11T21:15:58+00:00 Jackie Huang jackie.huang@windriver.com 2017-08-17T06:44:27+00:00 urn:sha1:7ec1ed5c8088b57caa3908477ddbec1ccb872cd9 Backport the patch to fix two CVEs: CVE-2017-8361: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. CVE-2017-8365: The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8361 https://nvd.nist.gov/vuln/detail/CVE-2017-8365 (From OE-Core rev: d92877ade8fd4dd9b548c6b664bf4357a1f9428a) (From OE-Core rev: a23241c1e10c706754c19d7f69fe7c6cbac3732e) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-09-11T21:15:58+00:00 Fan Xin fan.xin@jp.fujitsu.com 2017-06-22T01:44:02+00:00 urn:sha1:ce45b35a678dccd162804c7f05e54c53185c43d9 Backport upstream patch to fix CVE-2017-6892. CVE: CVE-2017-6892 (From OE-Core rev: cc9b8d0afe64b83f585843f3aff1c077f69fd656) (From OE-Core rev: eed7d052dc053732e2d485dcc7e551b6754c4576) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2011-04-28T09:44:29+00:00 Dongxiao Xu dongxiao.xu@intel.com 2011-04-19T08:40:19+00:00 urn:sha1:60cf46671e9b812578dd2f3997961cf6fb3bb748 (From OE-Core rev: 71794b266e3fcd9661f57a4ba70abc87e74b7326) Signed-off-by: Dongxiao Xu <dongxiao.xu@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2010-11-18T21:30:24+00:00 Saul Wold Saul.Wold@intel.com 2010-11-11T23:14:02+00:00 urn:sha1:041fc758e250a70a19ee2019e82fd9ed7e3b7101 Renamed and moved to recipes-multimedia Signed-off-by: Saul Wold <Saul.Wold@intel.com>