poky/meta at a602b9f74862d8db6dcfe0fe434aafb1e6d34761 - poky

mirrors/poky

0 Fork 0

mirror of https://git.yoctoproject.org/poky synced 2026-10-23 19:38:18 +00:00

Files

T

Yi Zhao a602b9f748 taglib: Security fix CVE-2017-12678

CVE-2017-12678: In TagLib 1.11.1, the rebuildAggregateFrames function in
id3v2framefactory.cpp has a pointer to cast vulnerability, which allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-12678

Patch from:
https://github.com/taglib/taglib/pull/831/commits/eb9ded1206f18f2c319157337edea2533a40bea6

(From OE-Core rev: 24ac12ecb19efc7c131c9711ba32e298ba860eb7)

(From OE-Core rev: bb90e08fbcbc7c60731aacdc4b82163507d9afdc)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-09-11 22:15:58 +01:00

classes

package.bbclass: Restore functionality to detect RPM dependencies

2017-08-31 17:57:12 +01:00

conf

v86d, qemuboot-x86.inc: use KERNEL_MODULE_AUTOLOAD+KERNEL_MODULE_PROBECONF for uvesafb instead of fbsetup init script

2017-08-29 11:57:28 +01:00

files

ext-sdk-prepare.py: use quiet mode when preparing sysroot

2017-04-19 10:38:37 +01:00

lib

package.bbclass: Restore functionality to detect RPM dependencies