]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
libwebp: Update CVE ID CVE-2023-4863
authorPawan <badganchipv@gmail.com>
Mon, 16 Oct 2023 08:21:23 +0000 (13:51 +0530)
committerSteve Sakoman <steve@sakoman.com>
Mon, 16 Oct 2023 15:07:13 +0000 (05:07 -1000)
Notice that it references different CVE id:
https://nvd.nist.gov/vuln/detail/CVE-2023-5129
which was marked as a rejected duplicate of:
https://nvd.nist.gov/vuln/detail/CVE-2023-4863
but it's the same issue. Hence update CVE ID CVE-2023-4863
to CVE-2023-5129.patch.

Signed-off-by: Pawan <badganchipv@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/webp/files/CVE-2023-5129.patch

index eb77e193c2efaf18a707ebf4eba9648b4451567c..ffff068c56f23f6cbf19d7c9159bad0b6d2020c2 100644 (file)
@@ -12,9 +12,16 @@ codes) streams are still decodable.
 Bug: chromium:1479274
 Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741
 
-CVE: CVE-2023-5129
+Notice that it references different CVE id:
+https://nvd.nist.gov/vuln/detail/CVE-2023-5129
+which was marked as a rejected duplicate of:
+https://nvd.nist.gov/vuln/detail/CVE-2023-4863
+but it's the same issue. Hence update CVE ID CVE-2023-4863
+
+CVE: CVE-2023-5129 CVE-2023-4863
 Upstream-Status: Backport [https://github.com/webmproject/libwebp/commit/2af26267cdfcb63a88e5c74a85927a12d6ca1d76]
 Signed-off-by: Colin McAllister <colinmca242@gmail.com>
+Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com>
 ---
  src/dec/vp8l_dec.c        | 46 ++++++++++---------
  src/dec/vp8li_dec.h       |  2 +-