Jagadeesh Krishnanjanappa ae3da5fa84 libsndfile1: CVE-2017-14245 CVE-2017-14246 ...

sfe_copy_data_fp: check value of "max" variable for being normal
and check elements of the data[] array for being finite.

Both checks use functions provided by the <math.h> header as declared
by the C99 standard.

Fixes #317
CVE-2017-14245
CVE-2017-14246

Affects libsndfile1 = 1.0.28

(From OE-Core rev: ad842a3a0e6ef78fb9449362753ae3592c775192)

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2018-08-23 07:50:01 +01:00

..

alsa

alsa-lib: Cleanup packaging

2018-08-07 12:13:03 +01:00

ffmpeg

ffmpeg: Upgrade to 4.0.2

2018-08-07 12:13:02 +01:00

flac

flac: patch for CVE-2017-6888

2018-08-23 07:50:00 +01:00

gstreamer

gst-validate: 1.14.1 -> 1.14.2

2018-08-09 23:47:55 +01:00

lame

lame: remove LICENSE_FLAGS

2018-05-04 13:28:05 +01:00

liba52

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

libid3tag

libid3tag: fix build with gperf 3.1

2017-08-13 09:27:37 +01:00

libogg

libogg: upgrade to 1.3.3

2017-11-30 10:49:21 +00:00

libomxil

meta: Drop now pointless manual -dbg packaging

2015-12-16 11:56:30 +00:00

libpng

libpng: upgrade 1.6.34 -> 1.6.35

2018-08-23 07:50:00 +01:00

libsamplerate

libsamplerate0_0.1.9.bb: set CVE_PRODUCT to libsamplerate

2017-07-24 09:13:31 +01:00

libsndfile

libsndfile1: CVE-2017-14245 CVE-2017-14246

2018-08-23 07:50:01 +01:00

libtheora

package_regex.inc: split the rest of the entries to their recipes

2015-12-08 10:20:52 +00:00

libtiff

tiff: security fix CVE-2018-7456

2018-07-26 13:16:40 +01:00

libvorbis

libvorbis: 3 CVE fixes

2018-08-16 22:40:28 +01:00

mpeg2dec

mpeg2dec: Fix textrels QA errors on arm

2017-07-11 15:57:08 +01:00

mpg123

mpg123: remove LICENSE_FLAGS

2018-05-04 13:28:05 +01:00

pulseaudio

pulseaudio: improve glibc 2.27 patch

2018-01-30 12:53:16 +00:00

sbc

sbc: fix license

2017-11-21 13:06:11 +00:00

speex

speex: update SRC_URI

2017-07-06 14:38:15 +01:00

webp

libwebp: update to 1.0.0

2018-05-08 16:14:14 +01:00

x264

x264: Use updated gnu-config artifacts

2018-04-03 23:53:20 +01:00