tools/centos-mirror-tools/config/centos
Joe Slater ea942842dd libwebp: fix CVE-2018-25011, CVE-2020-36328, CVE-2020-36329
CVE-2018-25011: libwebp: heap-based buffer overflow
CVE-2020-36328: libwebp: heap-based buffer overflow
CVE-2020-36329: libwebp: use-after-free

Testing

build-pkgs; build-iso (unused); create designer patch
install patch
run sanity test (PASS)
remove patch
run sanity test (PASS)

---sanity test ---
#!/bin/python
from PIL import Image
im = Image.open("/usr/share/backgrounds/day.jpg")
# create webp format file
im.save("day.webp")
---

Closes-Bug: 1954722
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Change-Id: I22ac6bd3b8399c6b16729201a0a4e05e631b5575
2021-12-22 18:24:16 +00:00
..
compiler compiler layer: Add cmake-2.8.12.2 as a dependency of dwarves 2021-10-20 10:09:59 -04:00
containers Enable build of docker images, charts and wheels from a layered build 2020-04-14 22:00:52 -04:00
distro libwebp: fix CVE-2018-25011, CVE-2020-36328, CVE-2020-36329 2021-12-22 18:24:16 +00:00
flock libwebp: fix CVE-2018-25011, CVE-2020-36328, CVE-2020-36329 2021-12-22 18:24:16 +00:00
mock Add priority to repositories in base-image 2021-11-09 15:51:30 -05:00