generic-poky/meta/recipes-multimedia
Baogen Shang 5f0074f022 libtiff: CVE-2013-4243
cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4243

(From OE-Core rev: a2a200a3951cecd7dd43dee360e0260051c97416)

Signed-off-by: Baogen Shang <baogen.shang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-12-12 17:00:25 +00:00
..
alsa alsa-lib: fix function definitions error for mips 2013-08-26 11:47:18 +01:00
flac flac: replace obsolete automake macros with working ones 2013-01-10 23:43:13 +00:00
gstreamer gst-ffmpeg: fix CVE-2013-3674 2013-12-12 17:00:22 +00:00
lame lame: Add dependency on ncurses 2013-10-07 09:37:33 +01:00
liba52 liba52: refactor packages for staticdev 2012-01-19 13:26:10 +00:00
libav libav: make X11 dependencies dependent on DISTRO_FEATURES 2013-09-24 17:24:12 +01:00
libid3tag libid3tag: replace obsolete automake macros with working ones 2013-01-10 23:43:13 +00:00
libmad libmad: replace obsolete automake macros with working ones 2013-01-15 08:10:11 +00:00
libogg libogg: upgrade to 1.3.1 2013-07-13 18:23:33 +01:00
libomxil libomxil (0.9.3): drop unecessary dependencies 2013-05-12 09:37:29 +01:00
libpng libpng: package new tools into a libpng-tools package 2013-08-06 12:39:57 +01:00
libsamplerate libsamplerate0: add PACKAGECONFIG for fftw 2013-08-30 18:06:31 +01:00
libsndfile libsndfile1: use PACKAGECONFIG for alsa distro feature 2012-05-03 15:48:01 +01:00
libtheora Upstream-Status: Add Upstream-Status for some missing patches 2011-07-26 15:48:08 +01:00
libtiff libtiff: CVE-2013-4243 2013-12-12 17:00:25 +00:00
libvorbis libvorbis: replace obsolete automake macros with working ones 2013-01-15 08:10:12 +00:00
mpeg2dec mpeg2dec: depend on libx11 conditionally 2012-02-23 23:59:38 +00:00
pulseaudio pulseaudio: Fix build break on armeb 2013-12-12 17:00:04 +00:00
sbc sbc: upgrade to 1.1 2013-05-12 09:37:31 +01:00
speex speex: use lib_package bbclass 2012-07-04 17:40:35 +01:00
tremor tremor: add a patch to build with arm thumb 2013-07-24 11:35:32 +01:00
x264 x264: add from meta-oe, update and tweak 2013-08-13 23:05:58 +01:00