On 13 November 2015 at 08:03, <jackie.hu...@windriver.com> wrote: > Jackie Huang (4): > libav: fix CVE-2015-3395 > libav: fix CVE-2015-6820 > libav: fix CVE-2015-6823 > libav: fix CVE-2015-6824 > > Kai Kang (1): > libav: fix CVE-2015-1872 >
I'd tend to lean towards squashing these int a single "libav: fix CVEs" commit which adds all five of those patches in a single operation (but as separate patches for tracking), but it's hard to have a strong opinion either way. However is the Pending upstream-status appropriate? Is this the right time to bring up swapping libav for ffmpeg again? Ross
-- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core