Peter Korsgaard 4a1a8277bb audiofile: add security patch for CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838 ... CVE-2017-6830: A heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp https://github.com/mpruett/audiofile/issues/34 CVE-2017-6834: A heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp https://github.com/mpruett/audiofile/issues/38 CVE-2017-6836: A heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h https://github.com/mpruett/audiofile/issues/40 CVE-2017-6838: Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/ https://github.com/mpruett/audiofile/issues/41 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>		2017-03-31 13:36:23 +02:00
..
0001-Fix-pkg-config-for-static-linking.patch	package/audiofile: add patch to fix static linking issue	2015-11-26 07:14:59 +01:00
0002-cast-to-unsigned-gcc6.patch	package/audiofile: fix compilation with gcc6	2016-06-06 23:21:59 +02:00
0003-Always-check-the-number-of-coefficients.patch	audiofile: add security patch for CVE-2017-6827 / CVE-2017-6828 / CVE-2017-6832 / CVE-2017-6833 / CVE-2017-6835 / CVE-2017-6837	2017-03-31 13:36:17 +02:00
0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch	audiofile: add security patch for CVE-2017-6829	2017-03-31 13:36:20 +02:00
0005-Check-for-multiplication-overflow-in-sfconvert.patch	audiofile: add security patch for CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838	2017-03-31 13:36:23 +02:00
audiofile.hash	audiofile: Add hash file	2015-03-12 23:45:36 +01:00
audiofile.mk	audiofile: comma separate licenses	2015-12-15 22:05:14 +01:00
Config.in	Config.in files: unify comments of toolchain option dependencies	2013-10-14 22:45:57 +02:00