]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 3ea65ee) | patch
libvorbis: CVE-2017-14632
authorTanu Kaskinen <tanuk@iki.fi>
Sat, 31 Mar 2018 05:21:31 +0000 (08:21 +0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 31 Mar 2018 13:17:22 +0000 (14:17 +0100)
commite584aca38396db5e3d461f57804519261eecedc2
tree4dbf793ab2342fba838d15de64e9700aa4ad6d8ctree | snapshot
parent3ea65ee8b31a16a20f5c28c19f4c758f8deabf6ecommit | diff
libvorbis: CVE-2017-14632

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libvorbis/libvorbis/CVE-2017-14632.patch [new file with mode: 0644] blob
meta/recipes-multimedia/libvorbis/libvorbis_1.3.5.bb diff | blob | history
Mirror of the official openembedded-core repository