mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-08 05:29:22 +00:00
rtmpdump: mark CVE-2015-8270, CVE-2015-8271 and CVE-2015-8272 as fixed
This CVE is marked as fixed by Debian. Extracting Debian jessie Debian sources [1] shows 4 commits uses for backports. All these commits are already included in current hash ([2]-[5]). ../tmp/work/core2-64-poky-linux/rtmpdump/2.4/git$ git log | grep 'commit \(10b580aabcec1621b25518271ba1ab2b018be88e\|...\|4312322107a94c81d3ec5b98f91bc6b923551dc5\)' commit 530f9bb2a02a78c1198fb2bf0293a12d225e4691 commit 4312322107a94c81d3ec5b98f91bc6b923551dc5 commit 39ec7eda489717d503bc4cbfaa591c93205695b6 commit 10b580aabcec1621b25518271ba1ab2b018be88e [1] https://snapshot.debian.org/archive/debian/20170704T094954Z/pool/main/r/rtmpdump/rtmpdump_2.4%2B20150115.gita107cef-1%2Bdeb8u1.debian.tar.xz [2] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/10b580aabcec1621b25518271ba1ab2b018be88e [3] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/39ec7eda489717d503bc4cbfaa591c93205695b6 [4] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/530f9bb2a02a78c1198fb2bf0293a12d225e4691 [5] https://git.ffmpeg.org/gitweb/rtmpdump.git/commitdiff/4312322107a94c81d3ec5b98f91bc6b923551dc5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -14,6 +14,10 @@ SRC_URI = " \
|
|||||||
|
|
||||||
S = "${WORKDIR}/git"
|
S = "${WORKDIR}/git"
|
||||||
|
|
||||||
|
CVE_STATUS_GROUPS += "CVES_2015"
|
||||||
|
CVES_2015 = "CVE-2015-8270 CVE-2015-8271 CVE-2015-8272"
|
||||||
|
CVES_2015[status] = "fixed-version: patched in current git hash"
|
||||||
|
|
||||||
inherit autotools-brokensep
|
inherit autotools-brokensep
|
||||||
|
|
||||||
EXTRA_OEMAKE = " \
|
EXTRA_OEMAKE = " \
|
||||||
|
|||||||
Reference in New Issue
Block a user