aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-multimedia
AgeCommit message (Collapse)Author
2018-08-23libsndfile1: CVE-2017-14634Jagadeesh Krishnanjanappa
double64_init: Check psf->sf.channels against upper bound This prevents division by zero later in the code. While the trivial case to catch this (i.e. sf.channels < 1) has already been covered, a crafted file may report a number of channels that is so high (i.e. > INT_MAX/sizeof(double)) that it "somehow" gets miscalculated to zero (if this makes sense) in the determination of the blockwidth. Since we only support a limited number of channels anyway, make sure to check here as well. CVE-2017-14634 Closes: #318 Affects libsndfile1 = 1.0.28 Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23libsndfile1: CVE-2017-14245 CVE-2017-14246Jagadeesh Krishnanjanappa
sfe_copy_data_fp: check value of "max" variable for being normal and check elements of the data[] array for being finite. Both checks use functions provided by the <math.h> header as declared by the C99 standard. Fixes #317 CVE-2017-14245 CVE-2017-14246 Affects libsndfile1 = 1.0.28 Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23libpng: upgrade 1.6.34 -> 1.6.35Maxin B. John
License-Update: copyright years updated Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-23flac: patch for CVE-2017-6888Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-16libvorbis: 3 CVE fixesJoe Slater
CVE-2017-14160, CVE-2018-10393 (same as 14160), and CVE-2018-10392. These fixes should be in libvorbis 1.3.7. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gst-validate: 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-python: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-omx: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-libav: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-rtsp-server: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-vaapi: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-plugins-ugly: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-plugins-bad: 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-plugins-good: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0-plugins-base: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-09gstreamer1.0: upgrade 1.14.1 -> 1.14.2Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-07alsa-lib: Cleanup packagingJoshua Watt
Cleans up the packaging by moving libasound.so.2 back into the alsa-lib package which was previously empty. Previously, it was difficult to create an image that had libasound.so.2, then create an SDK from that image that had the proper development files, because the only way to get libasound.so.2 was to do: IMAGE_INSTALL += "libasound" This however caused a problem because all of the development files that would be desired in the SDK were located in alsa-lib-dev, which wouldn't be included because alsa-lib wasn't included, and it was impossible to include alsa-lib because it was an empty package that was culled. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-08-07ffmpeg: Upgrade to 4.0.2Mingli Yu
Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-07-26gstreamer1.0-vaapi: Add patch for EGL CFLAGS for proper EGL supportCarlos Rafael Giani
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26gstreamer1.0-vaapi: Remove unnecessary FILESPATH modificationCarlos Rafael Giani
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26gstreamer1.0-plugin-bad: Update packageconfigsCarlos Rafael Giani
* Add packageconfigs for gl, libde265, lcms2, openh264, tinyalsa, ttml, webrtc, webrtcdsp * Remove unnecessary gstglconfig.h line, since that file is no longer part of -bad (it is in -base now) * Update EXTRA_OECONF flags, since new plugins got added to -bad * Add ttml to the default packageconfigs since its dependencies are all in oe-core Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26gstreamer1.0-plugin-good: Update packageconfigsCarlos Rafael Giani
* There is no twolame recipe in oe-core or in meta-openembedded, so disable it * Reorder the packageconfigs alphabetically Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26gstreamer1.0-plugin-base: Update packageconfigsCarlos Rafael Giani
* Add patches for gbm, libpng, libjpeg to conditionally enable/disable them in the configure script * Reorder the packageconfigs alphabetically Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26tiff: security fix CVE-2018-7456Joe Slater
NULL pointer use as described at nvd.nist.gov/vuln/detail/CVE-2018-7456. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-26tiff: security fix CVE-2018-8905Joe Slater
Buffer overflow described at nvd.nits.gov/vuln/detail/CVE-2018-8905. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-18recipes: Enforce ARM ISA just for arm arches <= armv5Khem Raj
armv7+ used thumb2 ISA and it compiles fine with thumb2 issues are only when using thumb1 ISA Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-07-18gstreamer1.0-plugins-good: disable gtk pluginAnuj Mittal
gtk-play example assumes that GTK's GL support always works if it is compiled in and first tries to use gtkglsink element which leads to problems if there are errors while instantiating GL context at a much later stage. This failure isn't detected and there is no fallback at this point. gtkglsink works on wayland though using poky defaults with gtk+3 since the gdk backend does support egl with wayland but it doesn't with x11. Disable the gtk plugin to ensure gtk-play just moves on when gtkglsink isn't present. This was the default when gtk was part of -plugins-bad before upgrade to 1.14.0. Fixes [YOCTO #12832] Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-18tiff: security fix CVE-2018-10963Joe Slater
Denial of service described at https://nvd.nist.gov/vuln/detail/CVE-2018-10963. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-06-18gst-validate: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-rtsp-server: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-omx: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-python: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-libav: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-vaapi: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-plugins-ugly: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-plugins-bad: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-plugins-good: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0-plugins-base: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Bugfixes only. Please see: https://gstreamer.freedesktop.org/releases/1.14/#1.14.1 Remove a backport patch and rebase one other patch. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer1.0: upgrade 1.14.0 -> 1.14.1Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-18gstreamer: enable ptest supportAnuj Mittal
Make sure that the tests are packaged and can be executed when ptest is enabled. Also, remove build host specific references from Makefile. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-15alsa-tools: rewrite packagingRoss Burton
alsa-tools is actually a collection of 20 separate tools, each with their own configure scripts. The dependencies are varied, old, and estoric (FLTK, GTK+ 1, 2, and 3, PyGTK 2, Qt3). Instead of maintaining patches to try and pick a subset that builds, use PACKAGECONFIG and some magic to build what the user requests. By default we build all the tools which have no dependencies, and the tools which need GTK+ 2 or GTK+ 3 if the relevant DISTRO_FEATURES are enabled. Add a patch to fix the build of ld10k1 with musl. The ncurses build dependency doesn't seem to be checked for, so remove that. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29alsa-utils: 1.1.5 -> 1.1.6Tanu Kaskinen
Dropped 0001-alsactl-don-t-let-systemd-unit-restore-the-volume-wh.patch, because an equivalent patch is included in the new release. License-Update: FSF address updated Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-29alsa-plugins: 1.1.5 -> 1.1.6Tanu Kaskinen
License-Update: FSF address updated Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-29libvorbis: 1.3.5 -> 1.3.6Tanu Kaskinen
Rebased 0001-configure-Check-for-clang.patch. Removed the backported CVE patches. License-Update: copyright years refreshed Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-29gstreamer1.0: let autotools.bbclass handle --disable-dependency-trackingAndre McCurdy
autotools.bbclass adds --disable-dependency-tracking to the configure command line by default, so there's no need for individual recipes to do so. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-22gstreamer1.0-plugins-good: enable PACKAGECONFIG gtk conditionallyKai Kang
PACKAGECONFIG 'gtk' is enabled by default for gstreamer1.0-plugins-good and it makes gstreamer1.0-plugins-good depends on package gtk+3 which requires any distro feature in ${GTK3DISTROFEATURES}. When none distro feature is enabled from ${GTK3DISTROFEATURES}, it causes error: | ERROR: Nothing PROVIDES 'gtk+3' (but .../meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.14.0.bb | DEPENDS on or otherwise requires it) | gtk+3 was skipped: one of '['x11', 'wayland']' needs to be in DISTRO_FEATURES So enable PACKAGECONFIG gtk conditionally for gstreamer1.0-plugins-good. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-15alsa-lib: Upgrade to 1.1.6Khem Raj
License-Update: FSF address updated Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-15alsa-tools: Update to 1.1.6Khem Raj
License-Update: FSF address updated in hdsploader/COPYING and ld10k1/COPYING.LIB Fix built with clang along the way Package python dependent tools into a separate package Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-11gst-plugins-good: enable mpg123 and lameAnuj Mittal
Since the last remaining mp3 patents have expired [1] and corresponding commercial flags from recipes for these removed, enable these to be built by default. [1] https://www.iis.fraunhofer.de/en/ff/amm/prod/audiocodec/audiocodecs/mp3.html Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-05-11gstreamer-libav: upgrade 1.12.4 -> 1.14.0Anuj Mittal
Drop one patch as the change is now present upstream. For changes, please see: https://gstreamer.freedesktop.org/releases/1.14/ Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>