From 3efa0091a433ed88ebc9d25630fbf8291808f0c2 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Sun, 28 Dec 2025 19:56:33 +0100 Subject: [PATCH] package/libsndfile: add CVE trailer in patch Since Buildroot commit [1] the patches that fixes a security vulnerability needs to reference the fixed vulnerability. This patch adds the relevant information to the patch header. [1] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale Signed-off-by: Thomas Petazzoni --- ...14-src-ogg-better-error-checking-for-vorbis.-Fixes-1035.patch | 1 + 1 file changed, 1 insertion(+) diff --git a/package/libsndfile/0014-src-ogg-better-error-checking-for-vorbis.-Fixes-1035.patch b/package/libsndfile/0014-src-ogg-better-error-checking-for-vorbis.-Fixes-1035.patch index dd9f157811..cb73d370bf 100644 --- a/package/libsndfile/0014-src-ogg-better-error-checking-for-vorbis.-Fixes-1035.patch +++ b/package/libsndfile/0014-src-ogg-better-error-checking-for-vorbis.-Fixes-1035.patch @@ -3,6 +3,7 @@ From: Arthur Taylor Date: Fri, 15 Nov 2024 19:46:53 -0800 Subject: [PATCH] src/ogg: better error checking for vorbis. Fixes #1035 +CVE: CVE-2024-50612 Upstream: https://github.com/libsndfile/libsndfile/commit/4755f5bd7854611d92ad0f1295587b439f9950ba Signed-off-by: Peter Korsgaard ---