]> code.ossystems Code Review - openembedded-core.git/commit
libsndfile1: CVE-2018-13139
authorChangqing Li <changqing.li@windriver.com>
Wed, 10 Oct 2018 01:15:53 +0000 (09:15 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 10 Oct 2018 11:42:40 +0000 (12:42 +0100)
commit6b5a9078a7c5035590ee4dc2e23582da94d4a104
tree5cfc26d2a15859039c82f84f5a1db65c54d6134f
parent6f49e72dbb36d0a42993e7c788c17ff03571ece7
libsndfile1: CVE-2018-13139

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28.

Fixed in https://github.com/erikd/libsndfile/issues/397

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2018-13139.patch [new file with mode: 0644]
meta/recipes-multimedia/libsndfile/libsndfile1_1.0.28.bb