Yi Zhao 1a73074d75 tiff: Security fixes ...

Fix CVE-2017-9147, CVE-2017-9936, CVE-2017-10668, CVE-2017-11335

References:
https://nvd.nist.gov/vuln/detail/CVE-2017-9147
https://nvd.nist.gov/vuln/detail/CVE-2017-9936
https://nvd.nist.gov/vuln/detail/CVE-2017-10668
https://nvd.nist.gov/vuln/detail/CVE-2017-11335

Patches from:
CVE-2017-9147:
https://github.com/vadz/libtiff/commit/4d4fa0b68ae9ae038959ee4f69ebe288ec892f06
CVE-2017-9936:
https://github.com/vadz/libtiff/commit/fe8d7165956b88df4837034a9161dc5fd20cf67a
CVE-2017-10688:
https://github.com/vadz/libtiff/commit/6173a57d39e04d68b139f8c1aa499a24dbe74ba1
CVE-2017-11355:
https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556

(From OE-Core rev: 5c89539edb17d01ffe82a1b2e7d092816003ecf3)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-23 08:47:03 +01:00

..

alsa

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

ffmpeg

ffmpeg: update to 3.3.3

2017-08-13 09:27:37 +01:00

flac

flac_1.3.1.bb: set CVE_PRODUCT to libflac

2017-07-24 09:13:31 +01:00

gstreamer

gstreamer1.0-plugins-bad: do not provide a fallback to openssl 1.0

2017-08-17 00:21:15 +01:00

lame

meta: update patch metadata

2016-07-08 09:57:24 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: fix build with gperf 3.1

2017-08-13 09:27:37 +01:00

libogg

…

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: upgrade to 1.6.31

2017-08-09 09:24:16 +01:00

libsamplerate

libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate

2017-07-24 09:13:31 +01:00

libsndfile

libsndfile1: Fix CVE-2017-8363

2017-08-18 23:46:38 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: Security fixes

2017-08-23 08:47:03 +01:00

libvorbis

libvorbis: Contain gcc specific compiler flags using configure option

2017-03-24 23:43:32 +00:00

mpeg2dec

mpeg2dec: Fix textrels QA errors on arm

2017-07-11 15:57:08 +01:00

mpg123

mpg123: upgrade to 1.25.6

2017-08-18 23:46:38 +01:00

pulseaudio

recipes: Make use of the new bb.utils.filter() function

2017-03-01 11:17:45 +00:00

sbc

…

speex

speex: update SRC_URI

2017-07-06 14:38:15 +01:00

webp

libwebp: update to 0.6.0

2017-03-01 23:27:09 +00:00

x264

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-16 00:03:13 +01:00