Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=pyro-next 2018-04-02T16:06:25+00:00 2018-04-02T16:06:25+00:00 Tanu Kaskinen tanuk@iki.fi 2018-03-31T05:21:32+00:00 urn:sha1:d74851311644caa24f439e911e0fde55010eaf05 Prevent out-of-bounds write in codebook decoding. The bug could allow code execution from a specially crafted Ogg Vorbis file. References: https://www.debian.org/security/2018/dsa-4140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146 (From OE-Core rev: 5c880fe974907195c563b5580cb43b3b2fb92203) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-04-02T16:06:25+00:00 Tanu Kaskinen tanuk@iki.fi 2018-03-31T05:21:31+00:00 urn:sha1:8950d4ffc4ea677b7900b6de5a3dce65cb4d2ccb Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632 (From OE-Core rev: e584aca38396db5e3d461f57804519261eecedc2) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-04-02T16:06:25+00:00 Tanu Kaskinen tanuk@iki.fi 2018-03-31T05:21:30+00:00 urn:sha1:20d103d88179e2c46e9e014eb629db411d4544f3 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633 (From OE-Core rev: 3ea65ee8b31a16a20f5c28c19f4c758f8deabf6e) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:35:09+00:00 urn:sha1:a2ad903fa96790a7a529b4bee7c1bb3da0234cdc (From OE-Core rev: b6ec8ab42befaa07c859a5c5cc14611b821a1304) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:33:41+00:00 urn:sha1:2aed68963f5c73985d02f3d378a7614169e09602 (From OE-Core rev: 957e9f92b17c6b268e6c037666d2f32ef23f7bf9) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:31:50+00:00 urn:sha1:a05828ec79f0930fa247a2a4caecbfc521792eb3 (From OE-Core rev: 7423b8318a381d139590f6ab2c50874d0eb775a6) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:30:13+00:00 urn:sha1:599438440e7ed71731ef27b16cce89ac166c67fb (From OE-Core rev: 13704be6d172eef2459bb3a5ceed47711ef08b99) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:28:49+00:00 urn:sha1:2b6b802cd53772f02c810994eca87139eff55056 (From OE-Core rev: e22d6cab6dcfa020408b541242c26a994958831f) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:27:08+00:00 urn:sha1:8e0f6c5ae5bc9e236640b6fcfbc059b10e209110 (From OE-Core rev: 7af2f595a595533356ddef42e542825faab3382a) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2017-11-05T22:39:49+00:00 Rajkumar Veer rveer@mvista.com 2017-11-04T05:25:08+00:00 urn:sha1:2e37f285521d69cf351481498518f9c5e721493d (From OE-Core rev: ac828e5620430cff207ac5dc14dc5e2dbf99f9de) Signed-off-by: Rajkumar Veer <rveer@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>