Tanu Kaskinen 399200d3a3 libvorbis: CVE-2017-14632 ...

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632

(From OE-Core rev: 5786e39e040f241f6bade29ba2ce61b7715e1b66)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2018-03-25 09:40:42 +01:00

..

alsa

alsa-utils: 1.1.4 -> 1.1.5

2017-12-10 22:45:18 +00:00

ffmpeg

ffmpeg: upgrade 3.4.1 -> 3.4.2

2018-03-04 11:35:41 +00:00

flac

flac_1.3.1.bb: set CVE_PRODUCT to libflac

2017-07-24 09:13:31 +01:00

gstreamer

gstreamer: refresh patches

2018-03-09 09:17:02 -08:00

lame

lame: 3.99.5 -> 3.100

2017-12-10 22:45:18 +00:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: fix build with gperf 3.1

2017-08-13 09:27:37 +01:00

libogg

libogg: upgrade to 1.3.3

2017-11-30 10:49:21 +00:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: fix upstream version check

2018-03-20 09:59:31 +00:00

libsamplerate

libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate

2017-07-24 09:13:31 +01:00

libsndfile

libsndfile1: Fix CVE-2017-8363

2017-08-18 23:46:38 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fixes

2018-03-25 09:40:41 +01:00

libvorbis

libvorbis: CVE-2017-14632

2018-03-25 09:40:42 +01:00

mpeg2dec

mpeg2dec: Fix textrels QA errors on arm

2017-07-11 15:57:08 +01:00

mpg123

mpg123: upgrade 1.25.8 -> 1.25.10

2018-03-04 11:35:41 +00:00

pulseaudio

pulseaudio: improve glibc 2.27 patch

2018-01-30 12:53:16 +00:00

sbc

sbc: fix license

2017-11-21 13:06:11 +00:00

speex

speex: update SRC_URI

2017-07-06 14:38:15 +01:00

webp

libwebp: update to 0.6.1

2018-02-06 11:06:29 +00:00

x264

x264: upgrade to latest revision

2018-02-06 11:06:29 +00:00