generic-poky/meta/recipes-gnome
Li Zhou 050629cd64 gdk-pixbuf: Security Advisory - gdk-pixbuf - CVE-2015-4491
pixops: Be more careful about integer overflow

Integer overflow in the make_filter_table function in pixops/pixops.c
in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and
Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other
products, allows remote attackers to execute arbitrary code or cause a
denial of service (heap-based buffer overflow and application crash) via
crafted bitmap dimensions that are mishandled during scaling.

(From OE-Core rev: e27f367d08becce9486f2890cb7382f3c8448246)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-19 18:05:37 +01:00
..
gdk-pixbuf gdk-pixbuf: Security Advisory - gdk-pixbuf - CVE-2015-4491 2015-08-19 18:05:37 +01:00
gnome gnome-icon-theme: clean up icon-naming search 2015-07-20 10:40:41 +01:00
gtk+ gtk-icon-utils-native: Upgrade 3.16.4 -> 3.16.6 2015-08-10 12:40:25 -07:00
gtk-doc-stub gtk-doc-stub: update to latest commit 2014-09-30 21:36:14 +01:00
gtk-engines gtk-engines: Make gtk-engines-dev installable by dropping dependency to not generated gtk-engines package. 2015-05-22 13:29:47 +01:00
gtk-theme-torturer Replace one-line DESCRIPTION with SUMMARY 2014-01-02 12:50:18 +00:00
hicolor-icon-theme hicolor-icon-theme: Upgrade to 0.15 2015-04-27 14:59:47 +01:00
json-glib json-glib: Upgrade 1.0.2 -> 1.0.4 2015-04-27 14:59:47 +01:00
libffi libffi: fix typo in fix-libffi.la-location.patch 2015-07-07 13:33:27 +01:00
libglade libglade: don't use gnome.bbclass 2014-02-21 16:09:08 +00:00
libnotify libowl/settings-daemon/libnotify: add x11 to REQUIRED_DISTRO_FEATURES 2015-05-14 11:43:58 +01:00
librsvg librsvg: Upgrade 2.40.9 -> 2.40.10 2015-08-16 09:24:56 +01:00
libunique recipes: Add missing pkgconfig class inherits 2014-06-03 16:49:19 +01:00