aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-multimedia
AgeCommit message (Collapse)Author
2019-07-29gstreamer1.0-plugins-base: fix CVE-2019-9928Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-13libsndfile1: fix CVE-2019-3832Ross Burton
The previous fix for CVE-2018-19758 wasn't complete, so backport another patch to solve it properly. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13libsndfile1: update security patchesRoss Burton
Remove CVE-2017-14245-14246.patch, fix rejected upstream as it doesn't solve the underlying issue. Instead 0001-a-ulaw-fix-multiple-buffer-overflows-432 also solves CVE-2017-14245 and CVE-2017-14246 properly. Add patches for CVE-2017-12562 and CVE-2018-19758. Refresh CVE-2018-13139.patch. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-22libpng: fix CVE-2019-7317Ross Burton
(From OE-Core rev: 983d4757db7d46dcd4116269c4446392e28f16fb) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-22libsndfile1: Security fix CVE-2018-19432Changqing Li
(From OE-Core rev: 6f010c9b7777aae5ce2108122d0c6d3b1d630a21) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-28libsndfile1: Security fix CVE-2017-17456/17457 CVE-2018-19661/19662Changqing Li
fix 4 CVEs, which is backport from https://github.com/erikd/libsndfile/commit/585cc28a93be27d6938f276af0011401b9f7c0ca (From OE-Core rev: 8f4af329df5373db8910726a6b954652623003dd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-28libpng: upgrade 1.6.35 -> 1.6.36Anuj Mittal
For changes, see: https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES License-Update: Added authors to license, formatting, version changes, export classification clarification and a new libpng2 license with clarification: The new libpng license comprises the terms and conditions from the zlib license, and the disclaimer from the Boost license. The legacy libpng license license, used until libpng-1.6.35, is appended to the new license, following the precedent established in the Python Software Foundation License version 2. (From OE-Core rev: 099aecfaa3baf6b24c2b751da92d7d2fa0266bf9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gst-validate: upgrade 1.14.2 -> 1.14.4Anuj Mittal
(From OE-Core rev: 21387613fec1a8c142ed48d7a74d587e205b0c98) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-python: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 454129a0dc8eabb53753f9d416cf7271c796acf4) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-omx: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 9b613f029490a3540492393206be004b649c0806) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-rtsp-server: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 8a73dc7da63bbd3c57bde2a3733d172d784e5f46) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-vaapi: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 9caacfe4c3ef92f3701f24ff3c924f50adb5f9de) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-libav: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 14370389a50bda84eee7b3a024709fd43fc7c5aa) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugins-ugly: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: d1e5c9b85f980e747c9d6c5682448e0756bd25cd) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugins-bad: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 74d9bd02f41d555317eef6b82e94f351ffc61529) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugins-good: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: adeec11d875a5603bd64b9bfb888da5cdb7631e5) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugins-base: upgrade 1.14.3 -> 1.14.4Anuj Mittal
(From OE-Core rev: 868059f052547a73e428fe8d4066dc4412e29478) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0: upgrade 1.14.3 -> 1.14.4Anuj Mittal
This release only contains bugfixes and it should be safe to update from 1.14.x. Release notes: https://gstreamer.freedesktop.org/releases/1.14/ (From OE-Core rev: 4286f191c4b10cf5f3a14ed391902a11a9d61a09) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gst-plugins-bad: add PACKAGECONFIG for msdkAnuj Mittal
gst-msdk is a plugin for Intel Media SDK. More details: https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/tree/sys/msdk/README (From OE-Core rev: c138fa26dde7fca5b366ab69bac84359ebbd0fd7) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-python: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: 750e03a231eb3bcf31c30cf67ff80a6bc821ee66) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-omx: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: ea4882b89500d9da8d7a731968ea7a311737f6ea) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-vaapi: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: c3d863f4f989461c61e7d61259423fe0e8202eed) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-rtsp-server: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: f62a87b3c6638c6da764d19133eba552f2102bae) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-libav: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: 4508d6f0befb1b91f9cfe74b0ca84c8fb5f79da5) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugin-ugly: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: aedec50bc8fb2ddcd1ea7cadbdd07f9d103840aa) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugin-bad: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: 22e124ef0b01c3aae75e8e29a3078cb42a47ae17) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugin-good: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: 63753e9c06641025ba4711af61a4f34e2388ec72) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0-plugin-base: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: df2a0fd27a23ece636c018d007e2dcf9343fb7a8) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-08gstreamer1.0: upgrade to version 1.14.3Carlos Rafael Giani
(From OE-Core rev: fb840932018cb449ee96904b8a2f17e7693a5669) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-12-04gstreamer1.0-vaapi: downgrade vaapisink to marginal rankAnuj Mittal
Using vaapisink (which doesn't supports DRI3 [1] and uses DRI2) with default poky configuration currently results in an unresponsive display because DRI2 rendering doesn't work (as of xserver 1.20.3) in non-composited environments [2]. Downgrade vaapisink to marginal for now so playbin (and in turn gst-play and gtk-play examples) uses next best sink element and works out of box. [1] https://github.com/intel/libva/issues/122 [2] https://gitlab.freedesktop.org/xorg/xserver/issues/13 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-18qemux86/gstreamer: Move kernel module recommendation to the machine ↵Richard Purdie
configuration If you try to build a system with multiple BSPs, one of which is qemux86 or qemux86-64, the gstreamer package will change. This will trigger anything using gstream to also be rebuilt. For a package based system, the PR values will also be incremented each time. The end result will be an ever growing set of PR values as well as being unable to tell which configured version of the multimedia components are really being deployed. These therefore belong in the machine configuration. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-18gstreamer1.0-plugins-bad: add openmpt packageconfigCarlos Rafael Giani
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-10-16Revert "gstreamer1.0-plugins-bad: remove rtmpdump from DEPENDS"Florian Wickert
This reverts commit aa6def606fcb239fa8997764cdf4ebb1ec27802d which I posted myself. The Problem is rtmpdump, not the gstreamer1.0-plugins-bad recipe. The correct to fix this is to patch rtmpdump to work with OpenSSL 1.1. Signed-off-by: Florian Wickert <fw@javox-solutions.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-10libsndfile1: CVE-2018-13139Changqing Li
A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28. Fixed in https://github.com/erikd/libsndfile/issues/397 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-09x264: Disable asm on musl/x86Khem Raj
Fixes WARNING: x264-r2854+gitAUTOINC+e9a5903edf-r0 do_package_qa: QA Issue: ELF binary '/mnt/a/yoe/build/tmp/work/i586-yoe-linux-musl/x264/r2854+gitAUTOINC+e9a5903edf-r0/packages-split/x264/usr/lib/libx264.so.152' has relocations in .text [textrel] WARNING: x264-r2854+gitAUTOINC+e9a5903edf-r0 do_package_qa: QA Issue: ELF binary '/mnt/a/yoe/build/tmp/work/i586-yoe-linux-musl/x264/r2854+gitAUTOINC+e9a5903edf-r0/packages-split/x264-bin/usr/bin/x264' has relocations in .text [textrel] Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-09ffmpeg: use bfd linker always for x86 targetKhem Raj
gold crashes when linking, so use bfd linker here, another option is to use --disable-asm but then we loose performance. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-10-03libtiff: fix CVE-2017-17095Joe Slater
Backport fix from gitlab.com/libtiff/libtiff. nvd.nist.gov does not yet reference this patch. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-09-20gstreamer1.0-plugins-bad: remove rtmpdump from DEPENDSFlorian Wickert
rtmpdump is not a build dependency for gstreamer1.0-plugins-bad even if rtmp is enabled. This wouldn't compile anyway due to the openssl/openssl10 incompatibility because rtmpdump requires openssl10. Signed-off-by: Florian Wickert <fw@javox-solutions.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-09-11gst-validate: Fix build on muslKhem Raj
Connect has different signature on musl. Fixes socket_interposer.c:103:1: error: conflicting types for 'connect' | connect (int socket, const struct sockaddr_in *addrin, socklen_t address_len) | ^ | recipe-sysroot/usr/include/sys/socket.h:327:5: note: previous declaration is here | int connect (int, const struct sockaddr *, socklen_t); | ^ Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-09-07gstreamer1.0-libav: use nasm instead of yasmRoss Burton
The options are still called yasm and there's some cleanup to be done, but as libav can use both yasm and nasm let's unify on nasm (last release six months ago, fifteen RCs since) instead of yasm (last release 2014). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-09-07ffmpeg: use nasm instead of yasmRoss Burton
As ffmpeg can use both yasm and nasm let's unify on nasm (last release six months ago, fifteen RCs since) instead of yasm (last release 2014). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-09-06ffmpeg: Fix CVE-2018-15822Mingli Yu
Fixes: Assertion failure Fixes: assert_flvenc.c:941_1.swf Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-29pulseaudio: 11.1 -> 12.2Tanu Kaskinen
Release notes for 12.0: https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/12.0/ 12.1 contains a few regression fixes: https://lists.freedesktop.org/archives/pulseaudio-discuss/2018-July/030259.html 12.2 is just a fixup for the configure script brokenness in the 12.1 tarball. qpaeq changed license from AGPL to LGPL, so now there's no AGPL licensed code any more. This removes the excuse to not enable fftw support (i.e. module-equalizer-sink and qpaeq). I'll enable fftw in a separate patch. There's a new gsettings module that should be enabled, but I'll do that in a separate patch. It's not particularly important, because the module is only used by the paprefs GUI application that doesn't seem to be packaged for OE at the moment. Removed upstreamed patches: 0001-padsp-Make-it-compile-on-musl.patch 0001-memfd-wrappers-only-define-memfd_create-if-not-alrea.patch License-Update: qpaeq changed license from AGPL to LGPL: https://gitlab.freedesktop.org/pulseaudio/pulseaudio/commit/61217528a1cb5043ca3fa1051a73ad3268cfb3d8 Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-29libid3tag: patch for CVE-2004-2779Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23libsndfile1: CVE-2017-14634Jagadeesh Krishnanjanappa
double64_init: Check psf->sf.channels against upper bound This prevents division by zero later in the code. While the trivial case to catch this (i.e. sf.channels < 1) has already been covered, a crafted file may report a number of channels that is so high (i.e. > INT_MAX/sizeof(double)) that it "somehow" gets miscalculated to zero (if this makes sense) in the determination of the blockwidth. Since we only support a limited number of channels anyway, make sure to check here as well. CVE-2017-14634 Closes: #318 Affects libsndfile1 = 1.0.28 Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23libsndfile1: CVE-2017-14245 CVE-2017-14246Jagadeesh Krishnanjanappa
sfe_copy_data_fp: check value of "max" variable for being normal and check elements of the data[] array for being finite. Both checks use functions provided by the <math.h> header as declared by the C99 standard. Fixes #317 CVE-2017-14245 CVE-2017-14246 Affects libsndfile1 = 1.0.28 Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23libpng: upgrade 1.6.34 -> 1.6.35Maxin B. John
License-Update: copyright years updated Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23flac: patch for CVE-2017-6888Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-16libvorbis: 3 CVE fixesJoe Slater
CVE-2017-14160, CVE-2018-10393 (same as 14160), and CVE-2018-10392. These fixes should be in libvorbis 1.3.7. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gst-validate: 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-18 05:41:22 +0000