kumquat-buildroot/package/mpg123
Peter Korsgaard a9db41dd13 package/mpg123: security bump to version 1.25.12
>From the release notes:
- Fix an out-of-bounds read of maximal two bytes for truncated RVA2 frames
  (oss-fuzz-bug 15975). The earlier fix around the same location needed
  one thought more. Actually, another though was needed, oss-fuzz-bug 16009
  documents the incomplete fix.

- Fix an invalid write of one zero byte for empty ID3v2 frames that demand
  de-unsyncing (oss-fuzz-bug 16050).

- Fix dynamic build with gcc -fsanitize=address (check for all dl functions
  before deciding that separate -ldl is not needed).

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b907d344d8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-09-02 13:46:16 +02:00
..
Config.in
mpg123.hash package/mpg123: security bump to version 1.25.12 2019-09-02 13:46:16 +02:00
mpg123.mk package/mpg123: security bump to version 1.25.12 2019-09-02 13:46:16 +02:00