Sudhir Dumbhare af4fdac1ff libpng: fix CVE-2026-33636 ...

Pick the patch [1] as mentioned in [2].

[1] https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-33636

Reference:
https://security-tracker.debian.org/tracker/CVE-2026-33636
https://www.suse.com/security/cve/CVE-2026-33636.html

(From OE-Core rev: be55a3bdc140d4882fab933f311c4b80912c3a77)

Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-05-12 21:31:33 +01:00

..

alsa

alsa-lib: patch CVE-2026-25068

2026-02-27 17:45:07 +00:00

ffmpeg

ffmpeg: set status for CVE-2025-12343

2026-03-16 10:22:06 +00:00

flac

flac: fix buildpaths warnings

2024-07-12 05:47:20 -07:00

gstreamer

gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs

2025-11-03 07:17:02 -08:00

lame

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

liba52

liba52: fix do_fetch error

2024-10-30 08:30:00 -07:00

libogg

…

libomxil

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libpng

libpng: fix CVE-2026-33636

2026-05-12 21:31:33 +01:00

libsamplerate

meta: fix version checks in all github recipes using the github-releases class

2022-09-28 08:01:10 +01:00

libsndfile

libsndfile1: patch CVE-2025-56226

2026-02-27 17:45:06 +00:00

libtheora

libtheora: mark CVE-2024-56431 as not vulnerable yet

2026-02-27 17:45:07 +00:00

libtiff

tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145

2026-03-25 17:34:13 +00:00

libvorbis

vorbis: mark patch as Inactive-Upstream

2024-07-17 05:36:14 -07:00

mpeg2dec

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

mpg123

mpg123: upgrade 1.32.6 -> 1.32.10

2025-03-19 07:25:56 -07:00

pulseaudio

pulseaudio: ignore CVE-2024-11586

2025-10-13 12:42:58 -07:00

sbc

sbc: upgrade 1.5 -> 2.0

2022-06-22 22:40:28 +01:00

speex

speexdsp: enable native variant

2024-01-07 12:24:57 +00:00

webp

libwebp: upgrade to 1.3.2

2023-09-20 08:57:27 +01:00

x264

recipes/classes/scripts: Drop SRCPV usage in OE-Core

2023-08-24 16:50:24 +01:00