]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
projects / thirdparty / openembedded / openembedded-core-contrib.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d345c67) | patch
libvorbis: CVE-2017-14632
authorTanu Kaskinen <tanuk@iki.fi>
Tue, 20 Mar 2018 08:50:23 +0000 (10:50 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 25 Mar 2018 08:40:42 +0000 (09:40 +0100)
commit399200d3a37dda6ad445612ea51ba52134f22561
tree7e2f6a11021d193acc79f4dcef79f2d1edbd998ftree | snapshot
parentd345c67168805e75938572a35d4f69236bfd8cb9commit | diff
libvorbis: CVE-2017-14632

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632

(From OE-Core rev: 5786e39e040f241f6bade29ba2ce61b7715e1b66)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14632.patch [new file with mode: 0644] blob
meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb diff | blob | blame | history
Mirror of git://git.openembedded.org/openembedded-core-contrib