[oe-commits] Kang Kai : gst-ffmpeg: fix CVE issues

Wed May 27 10:49:49 UTC 2015

Module: meta-openembedded.git
Branch: master-next
Commit: 9352d8e5f4980c8c1803f33a4c1d59cad8e8631c
URL:    http://git.openembedded.org/?p=meta-openembedded.git&a=commit;h=9352d8e5f4980c8c1803f33a4c1d59cad8e8631c

Author: Kang Kai <kai.kang at windriver.com>
Date:   Fri May 22 15:52:24 2015 +0800

gst-ffmpeg: fix CVE issues

Backport patches to fix following CVE issues:

* CVE-2011-4352
* CVE-2014-7933
* CVE-2014-8542
* CVE-2014-8543
* CVE-2014-8544
* CVE-2014-8545
* CVE-2014-8546
* CVE-2014-8547
* CVE-2014-9318
* CVE-2014-9603

Patch for CVE-2014-9603 in upstream is applied for version 2.x. Becuase
source code changes, just partly backport part of the commit which is
applicable to version 0.10.13.

Signed-off-by: Kai Kang <kai.kang at windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa at gmail.com>

---

 .../gst-ffmpeg-fix-CVE-2011-4352.patch             | 64 ++++++++++++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-7933.patch             | 38 +++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8542.patch             | 38 +++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8543.patch             | 35 ++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8544.patch             | 56 +++++++++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8545.patch             | 36 ++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8546.patch             | 35 ++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-8547.patch             | 59 ++++++++++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-9318.patch             | 37 +++++++++++++
 .../gst-ffmpeg-fix-CVE-2014-9603.patch             | 41 ++++++++++++++
 .../gstreamer-0.10/gst-ffmpeg_0.10.13.bb           | 10 ++++
 11 files changed, 449 insertions(+)

Diff:   http://git.openembedded.org/?p=meta-openembedded.git/?a=commitdiff;h=9352d8e5f4980c8c1803f33a4c1d59cad8e8631c