summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPeter Marko <peter.marko@siemens.com>2025-01-17 20:33:21 +0100
committerKhem Raj <raj.khem@gmail.com>2025-01-17 16:39:40 -0800
commit68f55c158e15a5d35702ae5c730586001e487f86 (patch)
tree970d2d48da59981dc370c3313e526e1a93012f99
parent410816524882e1a42fa1277b4ebbd58f16f15a52 (diff)
downloadmeta-openembedded-68f55c158e15a5d35702ae5c730586001e487f86.tar.gz
audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2]. This can be also verified with yocto build. Running without this patch: root@qemux86-64:~# sfconvert poc.wav output format wave malloc(): corrupted top size Aborted Running with it: root@qemux86-64:~# sfconvert poc.wav output format wave Audio File Library: Bad number of coefficients [error 62] Could not open file 'poc.wav' for reading. [1] https://github.com/mpruett/audiofile/issues/56 [2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch b/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
index 282f4c01b9..17a97163f5 100644
--- a/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
+++ b/meta-oe/recipes-multimedia/audiofile/files/0004-Always-check-the-number-of-coefficients.patch
@@ -17,6 +17,7 @@ CVE: CVE-2017-6832
17CVE: CVE-2017-6833 17CVE: CVE-2017-6833
18CVE: CVE-2017-6835 18CVE: CVE-2017-6835
19CVE: CVE-2017-6837 19CVE: CVE-2017-6837
20CVE: CVE-2020-18781
20Upstream-Status: Inactive-Upstream [lastrelease: 2013] 21Upstream-Status: Inactive-Upstream [lastrelease: 2013]
21Signed-off-by: Peter Marko <peter.marko@siemens.com> 22Signed-off-by: Peter Marko <peter.marko@siemens.com>
22--- 23---