generic-poky/meta/recipes-multimedia/pulseaudio
Shan Hai 0685207d43 pulseaudio: fix CVE-2014-3970
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module
in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of
service (assertion failure and abort) via an empty UDP packet.

Fix it by picking a patch from pulseaudio upstream code.

(From OE-Core rev: f9d7407e54f1fa3d3a316a5bbb8b80665e6f03fd)

Signed-off-by: Shan Hai <shan.hai@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-29 09:58:26 +01:00
..
pulseaudio pulseaudio: fix CVE-2014-3970 2014-07-29 09:58:26 +01:00
libatomics-ops_7.2.bb libatomics-ops: Extend to nativesdk 2014-07-19 00:09:02 +01:00
pulseaudio.inc pulseaudio: add missing dependency on libcap 2014-07-25 15:33:59 +01:00
pulseaudio_5.0.bb pulseaudio: fix CVE-2014-3970 2014-07-29 09:58:26 +01:00