mirror of
git://git.yoctoproject.org/poky
synced 2026-10-02 18:18:12 +00:00
0e894d205f
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633 (From OE-Core rev: 300b5e921460f8ab1d4870014b343eddd00e77b1) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 lines
861 B
BlitzBasic
21 lines
861 B
BlitzBasic
SUMMARY = "Ogg Vorbis Audio Codec"
|
|
DESCRIPTION = "Ogg Vorbis is a high-quality lossy audio codec \
|
|
that is free of intellectual property restrictions. libvorbis \
|
|
is the main vorbis codec library."
|
|
HOMEPAGE = "http://www.vorbis.com/"
|
|
BUGTRACKER = "https://trac.xiph.org"
|
|
SECTION = "libs"
|
|
LICENSE = "BSD"
|
|
LIC_FILES_CHKSUM = "file://COPYING;md5=7d2c487d2fc7dd3e3c7c465a5b7f6217 \
|
|
file://include/vorbis/vorbisenc.h;beginline=1;endline=11;md5=d1c1d138863d6315131193d4046d81cb"
|
|
DEPENDS = "libogg"
|
|
|
|
SRC_URI = "http://downloads.xiph.org/releases/vorbis/${BP}.tar.xz \
|
|
file://0001-configure-Check-for-clang.patch \
|
|
file://CVE-2017-14633.patch \
|
|
"
|
|
SRC_URI[md5sum] = "28cb28097c07a735d6af56e598e1c90f"
|
|
SRC_URI[sha256sum] = "54f94a9527ff0a88477be0a71c0bab09a4c3febe0ed878b24824906cd4b0e1d1"
|
|
|
|
inherit autotools pkgconfig
|