From 0b76139aa90828b3d58adc5853e1fddbe102b2a7 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 29 Dec 2025 10:07:09 +0100 Subject: [PATCH] package/opusfile: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch adds the relevant information to the patch header. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- .../0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch | 1 + 1 file changed, 1 insertion(+) diff --git a/package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch b/package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch index 2ef08502ab..8e3be36cdf 100644 --- a/package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch +++ b/package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch @@ -15,6 +15,7 @@ Thanks to https://github.com/xiph/opusfile/issues/36 for reporting. Signed-off-by: Timothy B. Terriberry Signed-off-by: Mark Harris +CVE: CVE-2022-47021 [Retrieved from: https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5] Signed-off-by: Fabrice Fontaine