[OE-core] [PATCH 0/5] libav: fix 5 CVE issues

[Burton, Ross]

On 13 November 2015 at 08:03, <jackie.huang at windriver.com> wrote:

> Jackie Huang (4):
>   libav: fix CVE-2015-3395
>   libav: fix CVE-2015-6820
>   libav: fix CVE-2015-6823
>   libav: fix CVE-2015-6824
>
> Kai Kang (1):
>   libav: fix CVE-2015-1872
>

I'd tend to lean towards squashing these int a single "libav: fix CVEs"
commit which adds all five of those patches in a single operation (but as
separate patches for tracking), but it's hard to have a strong opinion
either way.

However is the Pending upstream-status appropriate?  Is this the right time
to bring up swapping libav for ffmpeg again?

Ross
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20151116/e04b15d8/attachment-0002.html>