[Buildroot] [PATCH 1/1] package/audiofile: add security fix

Bernd Kuhls bernd.kuhls at t-online.de
Sun May 28 13:19:52 UTC 2017


Am Sun, 28 May 2017 15:09:53 +0200 schrieb Thomas Petazzoni:

> Applied to master, thanks. Just curious: how did you notice that this
> CVE that dates back from 2015 should be fixed?

Hi Thomas,

while trying to fix the symbol collision in mpd when statically linking 
audiofile and libsndfile at the same time I searched for patches already 
addressing the problem in well-known sources (Gentoo, Archlinux, Debian & 
co.) During the search I noticed that Gentoo carries this patch which we 
did not have yet.

Regards, Bernd




More information about the buildroot mailing list