summaryrefslogtreecommitdiffstats
path: root/package/gnuplot/gnuplot.hash
diff options
context:
space:
mode:
authorPeter Korsgaard <peter@korsgaard.com>2017-10-22 13:15:08 +0200
committerPeter Korsgaard <peter@korsgaard.com>2017-10-23 00:37:35 +0200
commit5675183a7ccab93a20172c26b33bc5a3588ca064 (patch)
treeb20dac894132d65427380ed9ac7a0e4491f8fa4b /package/gnuplot/gnuplot.hash
parent86a7d8cb0a78d4cb3aa4e37bbe5b68107d42f212 (diff)
downloadbuildroot-5675183a7ccab93a20172c26b33bc5a3588ca064.tar.gz
buildroot-5675183a7ccab93a20172c26b33bc5a3588ca064.zip
lame: security bump to version 3.100
Fixes the following security issues: CVE-2017-9410: fill_buffer_resample function in libmp3lame/util.c heap-based buffer over-read and ap CVE-2017-9411: fill_buffer_resample function in libmp3lame/util.c invalid memory read and application crash CVE-2017-9412: unpack_read_samples function in frontend/get_audio.c invalid memory read and application crash Drop patches now upstream or no longer needed: 0001-configure.patch: Upstream as mentioned in patch description 0002-gtk1-ac-directives.patch: Upstream as mentioned in patch description/release notes: Resurrect Owen Taylor's code dated from 97-11-3 to properly deal with GTK1. This was transplanted back from aclocal.m4 with a patch provided by Andres Mejia. This change makes it easy to regenerate autotools' files with a simple invocation of autoconf -vfi. 0003-msse.patch: Not needed as -march <x86-variant-with-msse-support> nowadays implies -msse. With these removed, autoreconf is no longer needed. Also add a hash for the license file while we're at it. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> (cherry picked from commit 7e3583dd558925a447eaa4367d659f39482fbbc0) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/gnuplot/gnuplot.hash')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud