[Buildroot] [PATCH] package/live555: security bump to version 2019.03.06

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > Fixes the following security issues:
 > - CVE-2019-6256: A Denial of Service issue was discovered in the LIVE555
 >   Streaming Media libraries as used in Live555 Media Server 0.93.  It can
 >   cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when
 >   RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in
 >   a GET request and a POST request within the same TCP session.  This occurs
 >   because of a call to an incorrect virtual function pointer in the
 >   readSocket function in GroupsockHelper.cpp.

 > - CVE-2019-7314: liblivemedia in Live555 before 2019.02.03 mishandles the
 >   termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up,
 >   which could lead to a Use-After-Free error that causes the RTSP server to
 >   crash (Segmentation fault) or possibly have unspecified other impact.

 > - CVE-2019-9215: n Live555 before 2019.02.27, malformed headers lead to
 >   invalid memory access in the parseAuthorizationHeader function.

 > The normal live555 web site is temporarily unavailable, so use an
 > alternative _SITE / drop upstream hash.

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed to 2019.02.x, thanks.

-- 
Bye, Peter Korsgaard