From 526ee4ca2c493de1ac494b69e5ce9a9e55835c3a Mon Sep 17 00:00:00 2001 From: Khairul Rohaizzat Jamaluddin Date: Tue, 12 Jan 2021 17:37:31 +0800 Subject: ffmpeg: Fix CVE-2020-35964, CVE-2020-35965 Backport the CVE patches from upstream: https://github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7 https://github.com/FFmpeg/FFmpeg/commit/3e5959b3457f7f1856d997261e6ac672bba49e8b CVE: CVE-2020-35964 CVE-2020-35965 Signed-off-by: Khairul Rohaizzat Jamaluddin Signed-off-by: Richard Purdie --- meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb') diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb index 97b2d21d31..ded8232713 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_4.3.1.bb @@ -27,6 +27,8 @@ SRC_URI = "https://www.ffmpeg.org/releases/${BP}.tar.xz \ file://mips64_cpu_detection.patch \ file://0001-lavf-srt-fix-build-fail-when-used-the-libsrt-1.4.1.patch \ file://0001-libavutil-include-assembly-with-full-path-from-sourc.patch \ + file://CVE-2020-35964.patch \ + file://CVE-2020-35965.patch \ " SRC_URI[sha256sum] = "ad009240d46e307b4e03a213a0f49c11b650e445b1f8be0dda2a9212b34d2ffb" -- cgit 1.2.3-korg