generic-poky/meta/recipes-multimedia
Yi Zhao 075b333e3d tiff: Security fix CVE-2016-3632
CVE-2016-3632 libtiff: The _TIFFVGetField function in tif_dirinfo.c in
LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of
service (out-of-bounds write) or execute arbitrary code via a crafted
TIFF image.

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3632
http://bugzilla.maptools.org/show_bug.cgi?id=2549
https://bugzilla.redhat.com/show_bug.cgi?id=1325095

The patch is from RHEL7.

(From OE-Core rev: 9206c86239717718be840a32724fd1c190929370)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-11-23 11:10:15 +00:00
..
alsa alsa-utils: enable optional building of manpages 2016-10-28 16:15:20 +01:00
ffmpeg ffmpeg: update to 3.2 2016-11-06 23:35:33 +00:00
flac flac: upgrade to 1.3.1 2015-02-08 08:00:29 +00:00
gstreamer gstreamer-plugins: Move introspection to individual recipes 2016-11-06 23:35:32 +00:00
lame meta: update patch metadata 2016-07-08 09:57:24 +01:00
liba52 package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
libid3tag libid3tag: use "foreign" automake strictness 2014-07-16 10:31:16 +01:00
libogg libogg: upgrade to 1.3.2 2014-06-01 14:29:31 +01:00
libomxil meta: Drop now pointless manual -dbg packaging 2015-12-16 11:56:30 +00:00
libpng libpng: Upgrade 1.6.24 -> 1.6.25 2016-11-06 23:35:35 +00:00
libsamplerate libsamplerate0: clean up dependencies 2016-11-06 23:35:36 +00:00
libsndfile libsndfile1: 1.0.26 -> 1.0.27 2016-07-26 08:56:27 +01:00
libtheora package_regex.inc: split the rest of the entries to their recipes 2015-12-08 10:20:52 +00:00
libtiff tiff: Security fix CVE-2016-3632 2016-11-23 11:10:15 +00:00
libvorbis libvorbis: remove legacy options 2015-09-03 12:43:20 +01:00
mpeg2dec package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
mpg123 mpg123: update to 1.23.8 2016-10-28 16:15:18 +01:00
pulseaudio pulseaudio: enable optional building of manpages 2016-10-28 16:15:20 +01:00
sbc sbc: upgrade to 1.3 2014-11-20 14:08:08 +00:00
speex speex: 1.2rc1 -> 1.2rc2 2015-07-16 15:09:15 +01:00
tremor upstream_tracking.inc: deprecate and move contents to recipes 2015-09-01 11:44:01 +01:00
webp libwebp: sepcify neon availability for arm 2016-09-09 11:53:36 +01:00
x264 x264: Update to latest on stable branch 2016-11-15 15:19:54 +00:00