summaryrefslogtreecommitdiffstats
path: root/meta-multimedia
Commit message (Collapse)AuthorAgeFilesLines
* meta-openembedded/all: adapt to UNPACKDIR changesAlexander Kanavin11 days66-71/+14
| | | | | | | | | | | | | Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: move known non-repro list to layer.confYoann Congal2025-06-202-15/+16
| | | | | | | | | | | | | | | | | | | | | | The current include file that stores the known non-reproducible packages is layer dependent and that forces the user of the layers to maintain the list of the files (for example, see AB config[0]). By moving the exclude list to each layer.conf and extending the common OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES variable, the known non-reproducible packages will be automatically excluded for each layer used in the reproducibility test without any special knowledge in the test environment. NB: the empty list for meta-initramfs was just removed not moved. [0]: https://git.yoctoproject.org/yocto-autobuilder-helper/tree/config.json?id=7d8933e75bdf7fb821a25617cb2dcabf1f3f8700#n322 Suggested-by: Quentin Schulz <quentin.schulz@cherry.de> Co-Developed-by: Guillaume Swaenepoel <guillaume.swaenepoel@smile.fr> Signed-off-by: Guillaume Swaenepoel <guillaume.swaenepoel@smile.fr> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libheif: update 1.19.5 -> 1.19.8Markus Volk2025-06-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | COPYING was changed [https://github.com/strukturag/libheif/commit/377a957bd84018f4d27588c989fa5c66935c16ed] 1.19.8 Set essential flag for transformative properties as required by MIAF. This fixes the display of AVIF images with transformations encoded by libheif in Chrome, which checks whether this flag is set. If the environment variable LIBHEIF_SECURITY_LIMITS is set to OFF, libheif will not check any security limits. This can be used if a user wants to work with large images that were blocked by the security limits, but the application software does not allow to adjust the libheif security limits. Resolved processing 16-bit JPEG-2000 1.19.7 Fixes a build error with SVT-AV1 encoder plugin when using reduced symbol visibility (#1480). 1.19.6 Bugfix release. Additionally, there are the following changes: C++ and Go wrapper licenses have been changed to MIT supports SVT-AV1 v3.0.0 encoder support emscripten builds for ES6 modules Fixes CVE-2025-43966 CVE-2025-43967 Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: update 1.4.4 -> 1.4.5Markus Volk2025-06-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PipeWire 1.4.5 (2025-06-04) This is a quick bugfix release that is API and ABI compatible with previous 1.x releases. Highlights - Fix negotiation errors when using multichannel output. Fixes audio in some games and mpv in some cases. - 1 Small fix and 1 improvement. SPA - Fix another bug caused by reversing the filter default value preference. (#4722) pulse-server - Implement STREAM_DONT_INHIBIT_AUTO_SUSPEND flags. This can reduce power in pavucontrol when monitoring inactive streams. (#4255 #4726) ALSA - Fix a potential deadlock when calling _drop and _drain at the same time. (#4728) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: updatre 1.4.3 -> 1.4.4Markus Volk2025-06-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | PipeWire 1.4.4 (2025-05-29) This is a quick bugfix release that is API and ABI compatible with previous 1.x releases. Highlights - Provide better compatibility with 1.2 for MIDI. - Fix mpv buffer negotiation regression. - Improve GStreamer compatibility with libcamera. SPA - Provide conversions to old style midi in the ALSA sequencer. - Negotiate only to UMP when using a newer library. - Fix negotiation direction for buffers, prefer the converter suggestion instead of the application until we can be sure applications make good suggestions. GStreamer - Allow a minimum of 1 buffers again instead of 8. libcamera will allocate only 4 buffers so we need to support this. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* aom: Disable rvv on riscv32Khem Raj2025-05-291-0/+1
| | | | | | | | Current implementation explicitly add rv64gcv to -march, which means its not yet tested on rv32gcv so disable RVV on 32bit RISCV for now. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* aom: update 3.7.0 -> 3.12.1Gyorgy Sarvari2025-05-271-2/+2
| | | | | | | | Changelog: https://aomedia.googlesource.com/aom/+/refs/heads/main/CHANGELOG Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireplumber: update 0.5.8 -> 0.5.10Markus Volk2025-05-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WirePlumber 0.5.10 Fixed a critical crash in linking-utils.haveAvailableRoutes that was introduced accidentally in 0.5.9 and caused loss of audio output on affected systems (#797, #799, #800, !713) WirePlumber 0.5.9 Added a new audio node grouping functionality using an external command line tool (!646) The libcamera monitor now supports devices that are not associated with device ids (!701) The wireplumber user systemd service is now associated with dbus.service to avoid strange warnings when dbus exits (!702) Added "SYSLOG_IDENTIFIER", "SYSLOG_FACILITY", "SYSLOG_PID" and "TID" to log messages that are sent to the journal (!709) Fixes: Fixed a crash of wpctl set-default on 32-bit architectures (#773) Fixed a crash when a configuration component had no 'provides' field (#771) Reduced the log level of some messages that didn't need to be as high (!695) Fixed another nil reference issue in the alsa.lua monitor script (!704) Fixed name deduplication of v4l2 and libcamera devices (!705) Fixed an issue with wpctl not being able to save settings sometimes (!708, #749) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: update 1.4.2 -> 1.4.3Markus Volk2025-05-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PipeWire 1.4.3 (2025-05-22) This is a bugfix release that is API and ABI compatible with previous 1.x releases. Highlights - Many netjack2 improvements. The driver/manager roles were fixed, MIDI is written correctly and errors are handled better. - Improvements to UMP sysex handling. - More small bug fixes and improvements. PipeWire - Let all commands go to the node. This makes it possible to send custom commands. Modules - Many netjack2 improvements. The driver/manager roles were fixed, MIDI is written correctly and errors are handled better. - Improve the filter-graph state management in filter-chain. SPA - Use default value of filter. (#4619) - Fix UMP program change conversion to MIDI 1.0. (#4664) - Skip only the first buffer for raw formats in v4l2 to avoid dropping important headers when dealing with encoded formats. - Fix ebur128 port name. (#4667) - Only convert UMP/MIDI, pass other controls. Fixes OSC and other control types in the mixer. (#4692) - Improve UMP sysex handling in alsa seq. - Improve ALSA audio.channels support. Only use this when the value is within the valid range. Tools - debug UMP SysRT messages correctly in pw-mididump. JACK - Handle sysex in UMP better by appending the converted midi1 sysex. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webrtc-audio-processing-2: Add latomic to linker flags on riscv32Khem Raj2025-05-231-1/+2
| | | | | | | | This is flagged by lld linker since it defaults to --no-allow-shlib-undefined which disallows undefined references in shared libs Cc: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: use webrtc-audioprocessing-2Markus Volk2025-05-221-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webrtc-audio-processing-2: add recipeMarkus Volk2025-05-222-0/+70
| | | | | | | | | | - add backport patch to fix build with gcc15 - dont add the patches from webrtc-audio-processing-1 The fixes have not been merged but it was said that those issues should have been fixed Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow-heif: Move to meta-multimediaLeon Anavi2025-05-222-0/+76
| | | | | | | | | | | | Move from meta-python to meta-multimedia which depends on layer meta-python. This way the recipe will reside in the layer where its main dependency libheif is. This work was sponsored by GOVCERT.LU. Suggested-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: update 1.4.1 -> 1.4.2Markus Volk2025-05-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PipeWire 1.4.2 (2025-04-14) This is a bugfix release that is API and ABI compatible with previous 1.x releases. Highlights - Do extra checks for MIDI to avoid 100% CPU usage on older kernels. - Fix some potential crashes in POD builder. - pw-cat streaming improvements on stdout/stdin. - Small fixes and improvements. PipeWire - Make the service files depend on DBus to avoid startup races. SPA - Do extra checks for MIDI to avoid 100% CPU usage on older kernels. - Use Header metadata by default in videoadapter. - Handle set_format result from v4l2 better. - Handle crash when POD builder overflows in the filter. - Work around a libebur128 bug. (#4646) Tools - pw-cat prefers AU format when streaming on stdout/stdin. (#4629) - Improve pw-cat verbose sndfile format debug. - Add the missing --channel-map long option to pw-loopback. GStreamer - Fix a leak in the deviceprovider. (#4616) - Fix negotiation and make renegotiation better. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* x265: Fix error: 'uint8_t'Leon Anavi2025-05-052-1/+37
| | | | | | | | | | | Include cstdint in json11.cpp Fixes: json11.cpp:101:32: error: 'uint8_t' does not name a type This work was sponsored by GOVCERT.LU. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpd: Upgrade to 0.24.3Khem Raj2025-05-011-5/+2
| | | | | | | Do not use vendored libfmt, it can now consume 11.1.x so use the libfmt from system Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: Avoid having pipewire-native depend on pipewirePeter Kjellerstedt2025-04-281-1/+3
| | | | | | | | | Make pipewire-pulse only depend on pipewire-modules-protocol-pulse for target. Otherwise the magic behind BBCLASSEXTEND and PACKAGES_DYNAMIC results in pipewire-native ending up depending on pipewire (for target). Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openal: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libopenmpt: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libde265: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluidsynth: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluidsynth: updateMarkus Volk2025-04-221-1/+2
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-multimedia-image-ptest-all: Do not run PTESTS_PROBLEMS_META_MULTIMEDIAKhem Raj2025-04-121-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: Add whinlatter (5.3) to compatible layer seriesKhem Raj2025-04-111-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openal-soft: upgrade 1.23.1 -> 1.24.3Nguyen Dat Tho2025-03-311-1/+1
| | | | | | | | Changelog: https://github.com/kcat/openal-soft/blob/master/ChangeLog Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyalsa: Remove dangling patch fileNiko Mauno2025-03-311-69/+0
| | | | | | | | Not referenced since commit 13ddd97e4f3b2557aa1aea1212e8003a503415ee ("tinyalsa: Upgrade to tip of trunk"). Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vlc: Remove dangling patch fileNiko Mauno2025-03-311-44/+0
| | | | | | | | Not referenced since commit 22c255b2e9bb8a8a97ded018f5ee0bc702b11f6f ("vlc: Upgrade to 3.0.20"). Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Drop styhead from LAYERSERIES_COMPATKhem Raj2025-03-311-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcamera: Fix build with gcc-15tho3.nguyen2025-03-282-0/+39
| | | | | | | | | | | | | | Backport patch to fix the following error: ... In file included from ../git/src/libcamera/dma_buf_allocator.cpp:9: ../git/include/libcamera/internal/dma_buf_allocator.h:66:19: error: 'uint64_t' has not been declared 66 | void sync(uint64_t step); | ^~~~~~~~ ../git/include/libcamera/internal/dma_buf_allocator.h:17:1: note: 'uint64_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>' ... Signed-off-by: tho3.nguyen <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: Deduce branch name from PVKhem Raj2025-03-241-1/+2
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc:Markus Volk <f_l_k@t-online.de>
* pipewire: update 1.4.0 -> 1.4.1Markus Volk2025-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a quick bugfix release that is API and ABI compatible with previous 1.x releases. - Handle SplitPCM wrong channels specifications. This fixes some problems with disappearing devices. - Add backwards compatibility support for when the kernel does not support UMP. Also fix UMP output. This restores MIDI support for older kernels/ALSA. - Fix a crash in audioconvert because the resampler was not using the right number of channels. - Some compilation fixes and small improvements. - Don't emit events when disconnecting a stream. (#3314) - Fix some compilation problems. (#4603) - Bump the ROC requirement to version 0.4.0 - Handle SplitPCM too few or too many channels. Add an error string to the device names when the UCM config has an error. - Add backwards compatibility support for when the kernel does not support UMP. - Configure the channels in the resampler correctly in all cases. (#4595) - Fix UMP output. - Use the right samplerate of the filter-graph in audioconvert in all cases. - Fix a crash with an incomming call. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: dont create alsa links for nativeMarkus Volk2025-03-221-1/+1
| | | | | | | | | | | | This fixes: ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: sstate found an absolute path symlink /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/sysroot-destdir/home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/etc/alsa/conf.d/50-pipewire.conf pointing at /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/usr/share/alsa/alsa.conf.d/50-pipewire.conf. Please replace this with a relative link. ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: sstate found an absolute path symlink /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/sysroot-destdir/home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/etc/alsa/conf.d/99-pipewire-default.conf pointing at /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/usr/share/alsa/alsa.conf.d/99-pipewire-default.conf. Please replace this with a relative link. ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: Failing task due to absolute path symlinks ERROR: Logfile of failure stored in: /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/temp/log.do_populate_sysroot.913232 ERROR: Task (virtual:native:/home/flk/poky/meta-openembedded/meta-multimedia/recipes-multimedia/pipewire/pipewire_1.4.0.bb:do_populate_sysroot) failed with exit code '1' Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webrtc-audio-processing-1: fix build with gcc-15Martin Jansa2025-03-212-0/+31
| | | | | | | | | | | * fixes: http://errors.yoctoproject.org/Errors/Details/848476/ ../webrtc-audio-processing-1.3/webrtc/api/task_queue/task_queue_base.h:53:32: error: 'uint32_t' has not been declared 53 | uint32_t milliseconds) = 0; | ^~~~~~~~ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Fix variable assignment whitespaceRichard Purdie2025-03-204-4/+4
| | | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rtmpdump: Drop using autotools-brokensepKhem Raj2025-03-191-3/+12
| | | | | | It does not use anything autotools like other than simple makefile Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcamera: add support for DNG filesKoen Kooi2025-03-181-0/+1
| | | | | | | | | | The 'cam' app in libcamera will turn on DNG support if it finds libtiff, but it has no way to explicitly disable it. Add a 'dng' PACKAGECONFIG to reliably enable it, disabling it will take more effort when using gstreamer. Signed-off-by: Koen Kooi <koen.kooi@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: Install missing ALSA config filesAriel D'Alessandro2025-03-181-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | As detailed in Pipewire documentation [0], the ALSA plugin requires config files to be symlinked as follow: ``` The plugin will be picked up by alsa when the following files are in /etc/alsa/conf.d/: /etc/alsa/conf.d/50-pipewire.conf -> /usr/share/alsa/alsa.conf.d/50-pipewire.conf /etc/alsa/conf.d/99-pipewire-default.conf ``` The above symlinks are missing, thus the pipewire device is not properly detected. Fix this by creating the required symlinks and installing them in the pipewire-alsa package. [0] https://github.com/PipeWire/pipewire/blob/master/INSTALL.md#alsa-plugin Link: https://github.com/openembedded/meta-openembedded/issues/704 Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: mark CVE-2023-34432 as patchedPeter Marko2025-03-161-0/+1
| | | | | | | | | | Patch for CVE-2021-23159 fixes also this CVE. Stated by: * https://security-tracker.debian.org/tracker/CVE-2023-34432 * https://sourceforge.net/p/sox/bugs/367/ Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2023-32627Peter Marko2025-03-162-0/+31
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/0028-CVE-2023-32627-Filter-null-sampling-rate-in-VOC-code.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2022-31651Peter Marko2025-03-162-0/+37
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2022-31651.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2022-31650Peter Marko2025-03-162-0/+61
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2022-31650.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2021-40426Peter Marko2025-03-162-0/+39
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2021-40426.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2021-33844Peter Marko2025-03-162-0/+41
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2021-33844.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2021-23159 and CVE-2021-2317Peter Marko2025-03-162-0/+32
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2021-23159.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: patch CVE-2021-3643 and CVE-2021-23210Peter Marko2025-03-162-0/+31
| | | | | | | | Use patch from Debian: https://salsa.debian.org/lts-team/packages/sox/-/blob/debian/14.4.2+git20190427-1+deb10u3/debian/patches/CVE-2021-3643.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: mark CVEs included in hash update as fixedPeter Marko2025-03-161-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | git log sox-14.4.2..HEAD | grep -o 'CVE-[0-9-]*' | sort -u CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642 CVE-2017-18189 CVE-2019-13590 CVE-2019-8354 CVE-2019-8355 CVE-2019-8356 CVE-2019-8357 Following remaining CVEs are handled in commits: CVE-2019-1010004 - NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1010004 - report: https://sourceforge.net/p/sox/bugs/299/ - patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/ - same commit as CVE-2017-18189 as mentioned in NVD and bugreport texts - https://security-tracker.debian.org/tracker/CVE-2019-1010004 links it - it's only commit in src/xa.c in last 15 years Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: update to latest git hashPeter Marko2025-03-164-81/+14
| | | | | | | | | | | | | | | | | | | | | | | | Resolve many CVEs and other bugs. $ git describe --tags sox-14.4.2-184-gf3094754 $ git log -1 HEAD | grep Date: Date: Thu May 30 14:46:01 2024 +0100 Recipe changes: * removed 0001-Update-exported-symbol-list.patch this commit is included now * refreshed 0001-remove-the-error-line-and-live-without-file-type-det.patch * 0001-tests-Include-math.h-for-fabs-definition.patch affected file was deleted from sources * added autoconf-archive-native dependency for newly used AX_APPEND_COMPILE_FLAGS macro * changed some config options from with/without to enable/disable https://sourceforge.net/p/sox/code/ci/6ff0e9322f9891f5a6ac6c9b3bceffbfca16bec3/ * added +git to PV to indicate version not on hash Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: build from gitPeter Marko2025-03-161-3/+4
| | | | | | | | Last release was done in 2015 but development still continues. Switch to git sources to allow update. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sox: extend CVE_PRODUCTPeter Marko2025-03-161-0/+2
| | | | | | | | | | | | | | | Add all relevant items from queries: $ sqlite3 nvdcve_2-2.db sqlite> select vendor, product, count(*) from products where product like '%sox%' group by vendor, product; commugen|sox_365|1 libsox_project|libsox|1 sox|sox|3 sox_project|sox|10 sqlite> select vendor, product, count(*) from products where product like '%sound_exchange%' group by vendor, product; sound_exchange_project|sound_exchange|16 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-06 05:14:43 +0000