Thomas Perale
9c9c531d0b
package/libmad: add patch for CVE-2017-837{2, 3, 4}
...
The commit [1] introduced fixes for the following CVEs:
- CVE-2017-8372: The mad_layer_III function in layer3.c in Underbit MAD
libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause
a denial of service (assertion failure and application exit) via a
crafted audio file.
- CVE-2017-8373: The mad_layer_III function in layer3.c in Underbit MAD
libmad 0.15.1b allows remote attackers to cause a denial of service
(heap-based buffer overflow and application crash) or possibly have
unspecified other impact via a crafted audio file.
- CVE-2017-8374: The mad_bit_skip function in bit.c in Underbit MAD
libmad 0.15.1b allows remote attackers to cause a denial of service
(heap-based buffer over-read and application crash) via a crafted
audio file.
In commit [2], the patches ended up not being applied anymore because
the APPLY_PATCHES step was called before the patch content exists.
This commit import the fixes in Buildroot.
[1] 858df3643f package/libmad: switch to debian to fix CVEs
[2] b21184a877 package/libmad: update the patches to be applied with fuzz 0
Signed-off-by: Thomas Perale <thomas.perale@mind.be >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2026-05-29 11:15:32 +02:00
..
2026-05-04 22:48:40 +02:00
2026-05-29 10:37:36 +02:00
2026-05-20 21:36:41 +02:00
2026-05-08 10:29:07 +02:00
2026-05-05 23:21:57 +02:00
2026-05-20 21:41:31 +02:00
2026-05-03 19:59:36 +02:00
2026-05-08 21:32:48 +02:00
2026-05-29 10:32:34 +02:00
2026-05-11 21:32:28 +02:00
2026-05-03 18:10:32 +02:00
2026-05-11 21:09:02 +02:00
2026-05-11 21:33:52 +02:00
2026-05-11 11:59:51 +02:00
2026-05-03 19:52:02 +02:00
2026-05-05 11:54:43 +02:00
2026-05-12 21:30:50 +02:00
2026-05-11 11:58:49 +02:00
2026-05-08 22:12:31 +02:00
2026-05-06 12:32:46 +02:00
2026-05-06 13:59:56 +02:00
2026-05-17 23:47:48 +02:00
2026-05-06 22:21:57 +02:00
2026-05-11 12:18:28 +02:00
2026-05-18 20:57:43 +02:00
2026-05-08 11:06:35 +02:00
2026-05-04 19:07:13 +02:00
2026-05-21 22:00:45 +02:00
2026-05-29 11:15:31 +02:00
2026-05-18 22:18:14 +02:00
2026-05-20 21:32:19 +02:00
2026-05-03 20:04:14 +02:00
2026-05-14 10:21:53 +02:00
2026-05-03 20:04:14 +02:00
2026-05-03 23:17:31 +02:00
2026-05-24 19:42:11 +02:00
2026-05-05 11:42:43 +02:00
2026-05-15 18:38:50 +02:00
2026-05-20 21:25:57 +02:00
2026-05-15 16:04:53 +02:00
2026-05-28 00:58:29 +02:00
2026-05-11 19:10:28 +02:00
2026-05-15 17:33:41 +02:00
2026-05-05 22:09:38 +02:00
2026-05-27 08:38:02 +02:00
2026-05-15 18:03:35 +02:00
2026-05-11 19:10:21 +02:00
2026-05-03 18:19:12 +02:00
2026-05-29 11:15:32 +02:00
2026-05-12 21:38:00 +02:00
2026-05-15 19:14:16 +02:00
2026-05-06 23:02:07 +02:00
2026-05-17 23:53:00 +02:00
2026-05-04 10:32:46 +02:00
2026-05-03 17:37:03 +02:00
2026-05-12 21:20:22 +02:00
2026-05-12 22:39:13 +02:00
2026-05-04 20:39:32 +02:00
2026-05-23 21:50:29 +02:00
2026-05-23 11:01:02 +02:00
2026-05-03 18:14:03 +02:00
2026-05-11 12:18:28 +02:00
2026-05-05 10:56:33 +02:00
2026-05-25 14:38:20 +02:00
2026-05-08 11:58:06 +02:00
2026-05-20 21:43:06 +02:00
2026-05-23 11:01:09 +02:00
2026-05-23 11:01:09 +02:00
2026-05-13 21:03:57 +02:00
2026-05-05 20:44:48 +02:00
2026-05-22 21:50:12 +02:00
2026-05-04 19:11:52 +02:00
2026-05-03 19:48:27 +02:00
2026-05-26 13:20:13 +02:00
2026-05-06 14:41:48 +02:00
2026-05-29 10:44:21 +02:00
2026-05-07 22:21:51 +02:00
2026-05-05 21:14:47 +02:00
2026-05-05 11:54:32 +02:00
2026-05-18 21:31:50 +02:00
2026-05-05 22:16:36 +02:00
2026-05-08 10:52:53 +02:00
2026-05-17 22:13:43 +02:00
2026-05-24 13:07:51 +02:00
2026-05-11 12:00:41 +02:00
2026-05-13 21:07:36 +02:00
2026-05-03 16:48:24 +02:00
2026-05-06 19:20:28 +02:00
2026-05-18 20:12:00 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-13 21:00:35 +02:00
2026-05-03 16:48:24 +02:00
2026-05-11 12:20:29 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-26 19:40:36 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-03 16:48:24 +02:00
2026-05-28 21:42:35 +02:00
2026-05-06 14:20:06 +02:00
2026-05-29 09:00:16 +02:00
2026-05-20 21:36:20 +02:00
2026-05-26 19:53:31 +02:00
2026-05-14 10:28:37 +02:00
2026-05-20 21:40:00 +02:00
2026-05-03 18:59:00 +02:00
2026-05-05 23:29:55 +02:00
2026-05-17 23:38:52 +02:00
2026-05-07 22:10:59 +02:00
2026-05-18 20:18:14 +02:00
2026-05-07 22:27:21 +02:00
2026-05-03 23:28:20 +02:00
2026-05-26 07:49:38 +02:00
2026-05-29 11:15:30 +02:00
2026-05-05 11:54:37 +02:00
2026-05-21 20:40:28 +02:00
2026-05-07 21:56:07 +02:00
2026-05-21 22:05:50 +02:00
2026-05-21 20:48:36 +02:00
2026-05-21 20:40:28 +02:00
2026-05-08 12:49:27 +02:00
2026-05-18 20:17:43 +02:00
2026-05-17 23:59:43 +02:00
2026-05-08 12:34:12 +02:00
2026-05-29 10:35:27 +02:00
2026-05-29 08:55:02 +02:00