浏览代码

package/wavpack: security bump to version 5.1.0

Fixes:
 - CVE-2016-10169: global buffer overread in read_code / read_words.c
 - CVE-2016-10170: heap out of bounds read in WriteCaffHeader / caff.c
 - CVE-2016-10171: heap out of bounds read in unreorder_channels / wvunpack.c
 - CVE-2016-10172: heap oob read in read_new_config_info / open_utils.c

[Peter: add CVE references]
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dbc108d6729a082d247910d1476df358570036ab)
Jörg Krause 7 年之前
父节点
当前提交
2599d77cbe
共有 2 个文件被更改,包括 2 次插入2 次删除
  1. 1 1
      package/wavpack/wavpack.hash
  2. 1 1
      package/wavpack/wavpack.mk

+ 1 - 1
package/wavpack/wavpack.hash

@@ -1,2 +1,2 @@
 # locally computed hash
-sha256  918d7e32a19598df543b17fff840b10a0880f87296f9e32af454d256b6a64049  wavpack-5.0.0.tar.bz2
+sha256  1939627d5358d1da62bc6158d63f7ed12905552f3a799c799ee90296a7612944  wavpack-5.1.0.tar.bz2

+ 1 - 1
package/wavpack/wavpack.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WAVPACK_VERSION = 5.0.0
+WAVPACK_VERSION = 5.1.0
 WAVPACK_SITE = http://www.wavpack.com
 WAVPACK_SOURCE = wavpack-$(WAVPACK_VERSION).tar.bz2
 WAVPACK_INSTALL_STAGING = YES