Skip to content

libvorbis security fixes

Tanu Kaskinen openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest3 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3libvorbis: CVE-2017-14633meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14633.patch meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb+43 -00 replies
2/3libvorbis: CVE-2017-14632meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14632.patch meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb+63 -00 replies
3/3libvorbis: CVE-2018-5146meta/recipes-multimedia/libvorbis/libvorbis/CVE-2018-5146.patch meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb+101 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/3] libvorbis security fixes

libvorbis 1.3.6 was recently released, and contains fixes for some CVEs. Since the deadline for version upgrades is past, I'm only submitting the CVE fixes.

Tanu Kaskinen (3):
libvorbis: CVE-2017-14633
libvorbis: CVE-2017-14632
libvorbis: CVE-2018-5146

 .../libvorbis/libvorbis/CVE-2017-14632.patch       |  62 +++++++++++++
 .../libvorbis/libvorbis/CVE-2017-14633.patch       |  42 +++++++++
 .../libvorbis/libvorbis/CVE-2018-5146.patch        | 100 +++++++++++++++++++++
 .../libvorbis/libvorbis_1.3.5.bb                   |   3 +
 4 files changed, 207 insertions(+)
 create mode 100644 meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14632.patch
 create mode 100644 meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14633.patch
 create mode 100644 meta/recipes-multimedia/libvorbis/libvorbis/CVE-2018-5146.patch
Signature · 1 line
2.16.2

Read the cover letter in its thread