On 13 November 2015 at 08:03, <jackie.hu...@windriver.com> wrote:

> Jackie Huang (4):
>   libav: fix CVE-2015-3395
>   libav: fix CVE-2015-6820
>   libav: fix CVE-2015-6823
>   libav: fix CVE-2015-6824
>
> Kai Kang (1):
>   libav: fix CVE-2015-1872
>

I'd tend to lean towards squashing these int a single "libav: fix CVEs"
commit which adds all five of those patches in a single operation (but as
separate patches for tracking), but it's hard to have a strong opinion
either way.

However is the Pending upstream-status appropriate?  Is this the right time
to bring up swapping libav for ffmpeg again?

Ross
-- 
_______________________________________________
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Reply via email to