poky/meta/recipes-multimedia
Tanu Kaskinen d7897f17b9 libvorbis: CVE-2018-5146
Prevent out-of-bounds write in codebook decoding. The bug could allow
code execution from a specially crafted Ogg Vorbis file.

References:
https://www.debian.org/security/2018/dsa-4140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146

(From OE-Core rev: 7d5d262c03745e5c61e1e9c84f108d842d16e5ec)

(From OE-Core rev: ccf97c35f6153abc639f01c4940dda5e6e8a3fbe)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-05 15:13:48 +01:00
..
alsa alsa-lib: allow building ARM thumb again 2016-10-05 10:10:11 +01:00
ffmpeg ffmpeg: update to 3.1.3 2016-09-03 09:58:39 +01:00
flac flac: upgrade to 1.3.1 2015-02-08 08:00:29 +00:00
gstreamer Revert "gst-player: Disable visualizations" 2016-10-05 10:10:11 +01:00
lame meta: update patch metadata 2016-07-08 09:57:24 +01:00
liba52 package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
libid3tag libid3tag: use "foreign" automake strictness 2014-07-16 10:31:16 +01:00
libogg libogg: upgrade to 1.3.2 2014-06-01 14:29:31 +01:00
libomxil meta: Drop now pointless manual -dbg packaging 2015-12-16 11:56:30 +00:00
libpng libpng: use SourceForge mirror 2017-10-10 17:27:40 +01:00
libsamplerate package_regex.inc: split the rest of the entries to their recipes 2015-12-08 10:20:52 +00:00
libsndfile libsndfile1: 1.0.26 -> 1.0.27 2016-07-26 08:56:27 +01:00
libtheora package_regex.inc: split the rest of the entries to their recipes 2015-12-08 10:20:52 +00:00
libtiff tiff: Security fix for CVE-2017-7593 2017-11-21 14:43:54 +00:00
libvorbis libvorbis: CVE-2018-5146 2018-04-05 15:13:48 +01:00
mpeg2dec package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
mpg123 mpg123: update to 1.23.6 2016-09-03 09:58:38 +01:00
pulseaudio pulseaudio: add ${S}/LICENSE to LIC_FILES_CHKSUM 2016-09-16 15:24:03 +01:00
sbc sbc: upgrade to 1.3 2014-11-20 14:08:08 +00:00
speex speex: 1.2rc1 -> 1.2rc2 2015-07-16 15:09:15 +01:00
tremor upstream_tracking.inc: deprecate and move contents to recipes 2015-09-01 11:44:01 +01:00
webp libwebp: sepcify neon availability for arm 2016-09-09 11:53:36 +01:00
x264 x264: add textrel to INSANE_SKIP 2016-09-22 11:13:24 +01:00