mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-17 04:37:19 +00:00
Ankur Tyagi
91ea5aa570
Details https://nvd.nist.gov/vuln/detail/CVE-2025-48174 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
24 lines
782 B
BlitzBasic
24 lines
782 B
BlitzBasic
SUMMARY = "This library aims to be a friendly, portable C implementation of the AV1 Image File Format"
|
|
HOMEPAGE = "https://github.com/AOMediaCodec/libavif"
|
|
SECTION = "libs"
|
|
LICENSE = "BSD-2-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=c528b75b07425b5c1d2e34de98c397b5"
|
|
|
|
SRC_URI = "git://github.com/AOMediaCodec/libavif.git;protocol=https;branch=v1.0.x \
|
|
file://CVE-2025-48174_1.patch \
|
|
file://CVE-2025-48174_2.patch \
|
|
file://CVE-2025-48174_3.patch \
|
|
file://CVE-2025-48174_4.patch \
|
|
"
|
|
|
|
S = "${WORKDIR}/git"
|
|
SRCREV = "d1c26facaf5a8a97919ceee06814d05d10e25622"
|
|
|
|
DEPENDS = "dav1d"
|
|
|
|
inherit cmake
|
|
|
|
EXTRA_OECMAKE += "-DAVIF_CODEC_DAV1D=ON"
|
|
|
|
CVE_STATUS[CVE-2025-48175] = "cpe-incorrect: The current version (1.0.1) is not affected by the CVE"
|