]> code.ossystems Code Review - openembedded-core.git/commit
taglib: Security fix CVE-2017-12678
authorYi Zhao <yi.zhao@windriver.com>
Fri, 25 Aug 2017 02:56:56 +0000 (10:56 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 25 Aug 2017 12:33:40 +0000 (13:33 +0100)
commit24ac12ecb19efc7c131c9711ba32e298ba860eb7
treee46874bc2ed479a8a183e56976dfaca3c3d66418
parent82d244a9225bd1fa512e696aae917febe051fcf9
taglib: Security fix CVE-2017-12678

CVE-2017-12678: In TagLib 1.11.1, the rebuildAggregateFrames function in
id3v2framefactory.cpp has a pointer to cast vulnerability, which allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via a crafted audio file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-12678

Patch from:
https://github.com/taglib/taglib/pull/831/commits/eb9ded1206f18f2c319157337edea2533a40bea6

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-support/taglib/taglib/CVE-2017-12678.patch [new file with mode: 0644]
meta/recipes-support/taglib/taglib_1.11.1.bb