mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/wavpack: security bump to version 5.1.0

Browse Source 
Fixes:
 - CVE-2016-10169: global buffer overread in read_code / read_words.c
 - CVE-2016-10170: heap out of bounds read in WriteCaffHeader / caff.c
 - CVE-2016-10171: heap out of bounds read in unreorder_channels / wvunpack.c
 - CVE-2016-10172: heap oob read in read_new_config_info / open_utils.c

[Peter: add CVE references]
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dbc108d672)
This commit is contained in:
Jörg Krause
2017-01-22 21:39:21 +01:00
committed by Peter Korsgaard
parent ba416e0f48
commit 2599d77cbe
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/wavpack/wavpack.hash
View File

@@ -1,2 +1,2 @@
# locally computed hash
sha256 918d7e32a19598df543b17fff840b10a0880f87296f9e32af454d256b6a64049 wavpack-5.0.0.tar.bz2
sha256 1939627d5358d1da62bc6158d63f7ed12905552f3a799c799ee90296a7612944 wavpack-5.1.0.tar.bz2

2
package/wavpack/wavpack.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
WAVPACK_VERSION = 5.0.0
WAVPACK_VERSION = 5.1.0
WAVPACK_SITE = http://www.wavpack.com
WAVPACK_SOURCE = wavpack-$(WAVPACK_VERSION).tar.bz2
WAVPACK_INSTALL_STAGING = YES