generic-poky/meta/recipes-multimedia
Li Zhou 49f6a9e794 libtiff: Security Advisory - libtiff - CVE-2017-5225
Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

(From OE-Core rev: 434990304bdfb70441b399ff8998dbe3fe1b1e1f)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-31 14:43:01 +00:00
..
alsa alsa-tools: 1.1.0 -> 1.1.3 2017-01-23 12:05:21 +00:00
ffmpeg ffmpeg: disable asm for x32 2017-01-09 13:39:12 +00:00
flac flac: 1.3.1 -> 1.3.2 2017-01-23 12:05:21 +00:00
gstreamer gstreamer1.0-plugins-base: disable ivorbis 2017-01-26 10:44:27 +00:00
lame meta: update patch metadata 2016-07-08 09:57:24 +01:00
liba52 package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
libid3tag libid3tag: use "foreign" automake strictness 2014-07-16 10:31:16 +01:00
libogg libogg: upgrade to 1.3.2 2014-06-01 14:29:31 +01:00
libomxil meta: Drop now pointless manual -dbg packaging 2015-12-16 11:56:30 +00:00
libpng libpng: Upgrade 1.6.26 -> 1.6.28 2017-01-26 10:44:28 +00:00
libsamplerate libsamplerate0: clean up dependencies 2016-11-06 23:35:36 +00:00
libsndfile libsndfile1: 1.0.26 -> 1.0.27 2016-07-26 08:56:27 +01:00
libtheora package_regex.inc: split the rest of the entries to their recipes 2015-12-08 10:20:52 +00:00
libtiff libtiff: Security Advisory - libtiff - CVE-2017-5225 2017-01-31 14:43:01 +00:00
libvorbis libvorbis: remove legacy options 2015-09-03 12:43:20 +01:00
mpeg2dec package_regex.inc: split sourceforge related entries to their own recipes 2015-12-08 10:20:52 +00:00
mpg123 mpg123: update to 1.23.8 2016-10-28 16:15:18 +01:00
pulseaudio pulseaudio: enable optional building of manpages 2016-10-28 16:15:20 +01:00
sbc sbc: upgrade to 1.3 2014-11-20 14:08:08 +00:00
speex speex: 1.2rc1 -> 1.2rc2 2015-07-16 15:09:15 +01:00
tremor tremor: Use mirror tarball instead of svn url 2017-01-23 22:38:49 +00:00
webp libwebp: sepcify neon availability for arm 2016-09-09 11:53:36 +01:00
x264 x264: for x32, disable asm and pass -mx32 2017-01-09 13:39:12 +00:00