summaryrefslogtreecommitdiffstats
path: root/meta/recipes-multimedia
Commit message (Collapse)AuthorAgeFilesLines
* gstreamer1.0: skip a test that is known to be flakyRoss Burton2024-02-292-0/+36
| | | | | | | | | | | | | | | | | The aggregator testcase test_infinite_seek_50_src_live is known upstream to be flaky[1] and when this fails in their CI they just ignore it. It's failing often on our autobuilder, so disable the test case for now until upstream have resolved this issue. [ YOCTO #15054 ] [1] https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/410 (From OE-Core rev: c2c9cbc107e5428122ad26b5c478602f0c8c0fbe) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Update CVE_STATUS for incorrect cpesSimone Weiß2024-02-241-0/+1
| | | | | | | | | | Set CVE_STATUS as none of the issues apply against the versions used in the recipes. (From OE-Core rev: cea8c8bf73e84133f566d1c2ca0637494f2d7afe) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Remove some not needed CVE_STATUSSimone Weiß2024-02-241-2/+0
| | | | | | | | | | CVE_STATUS was set for those components, but meanwhile databases are updated with corrected information, so setting the CVE_STATUS is not needed anymore. (From OE-Core rev: 5ec6057cfa66ceeb33bec013e320f8e3fa7d7ecf) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.22.9 -> 1.22.10Anuj Mittal2024-02-1724-89/+76
| | | | | | | (From OE-Core rev: d0a546e21760004897f814981445433a5d5e69a6) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-utils: upgrade 1.2.10 -> 1.2.11Michael Opdenacker2024-02-083-65/+1
| | | | | | | | | | | - Upstream release upgrade See https://www.alsa-project.org/wiki/Detailed_changes_v1.2.10_v1.2.11 - Remove merged patches (From OE-Core rev: 877ab719495e0d6d228e355e81a52db4a1291b6e) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-ucm-conf: upgrade 1.2.10 -> 1.2.11Michael Opdenacker2024-02-081-1/+1
| | | | | | | | | | - Upstream release update See https://www.alsa-project.org/wiki/Detailed_changes_v1.2.10_v1.2.11 (From OE-Core rev: c40625abc7b83582139fa9ce4f638dd2cf404ad5) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-tools: upgrade 1.2.5 -> 1.2.11Michael Opdenacker2024-02-081-1/+1
| | | | | | | | | - Upstream release update See https://www.alsa-project.org/wiki/Detailed_changes_v1.2.10_v1.2.11 (From OE-Core rev: deef08ab66ed5983a962e59655d03c2549e1132c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: upgrade 1.2.10 -> 1.2.11Michael Opdenacker2024-02-083-54/+40
| | | | | | | | | | | | - Upstream release update See https://www.alsa-project.org/wiki/Detailed_changes_v1.2.10_v1.2.11 - Remove merged patch - Add new patch merged after the release (From OE-Core rev: 5260a5e2316bb8d20cfb20e345f7aefe936a0da5) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: fix CVE-2023-52355 and CVE-2023-52356Yogita Urade2024-02-084-0/+318
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2023-52355: An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB. Issue fixed by providing a documentation update. CVE-2023-52356: A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service. References: https://nvd.nist.gov/vuln/detail/CVE-2023-52355 https://security-tracker.debian.org/tracker/CVE-2023-52355 https://gitlab.com/libtiff/libtiff/-/issues/621 https://gitlab.com/libtiff/libtiff/-/merge_requests/553 https://nvd.nist.gov/vuln/detail/CVE-2023-52356 https://gitlab.com/libtiff/libtiff/-/issues/622 https://gitlab.com/libtiff/libtiff/-/merge_requests/546 (From OE-Core rev: 831d7a2fffb3dec94571289292f0940bc7ecd70a) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpng: upgrade 1.6.40 -> 1.6.41Wang Mingyu2024-02-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Added SIMD-optimized code for the Loongarch LSX hardware. - Fixed the run-time discovery of MIPS MSA hardware. - Fixed an off-by-one error in the function 'png_do_check_palette_indexes', which failed to recognize errors that might have existed in the first column of a broken palette-encoded image. This was a benign regression accidentally introduced in libpng-1.6.33. No pixel was harmed. - Fixed, improved and modernized the contrib/pngminus programs, i.e., png2pnm.c and pnm2png.c - Removed old and peculiar portability hacks that were meant to silence warnings issued by gcc version 7.1 alone. - Fixed and modernized the CMake file, and raised the minimum required CMake version from 3.1 to 3.6. - Allowed the configure script to disable the building of auxiliary tools and tests, thus catching up with the CMake file. - Fixed a build issue on Mac. - Moved the Autoconf macro files to scripts/autoconf. - Moved the CMake files (except for the main CMakeLists.txt) to scripts/cmake and moved the list of their contributing authors to scripts/cmake/AUTHORS.md - Updated the CI configurations and scripts. - Relicensed the CI scripts to the MIT License. - Improved the test coverage. License-Update: Copyright year updated to 2024. (From OE-Core rev: 4e0ec5769416938a22f64dc4767480acf76fd247) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer: upgrade 1.22.8 -> 1.22.9Wang Mingyu2024-02-0311-11/+12
| | | | | | | | | | | Changelog: https://gstreamer.freedesktop.org/releases/1.22 (From OE-Core rev: 30b3835c367ff1de00d24cddf3bd920ea29f15c5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: Update to 17.0Fabio Estevam2024-01-262-1/+2
| | | | | | | | | | | | | | | | | | | Update to pulseaudio 17.0 version. Since pulseaudio commit e96d278bfc51 ("daemon/meson.build: Install dbus policy in /usr, not /etc"), pulseaudio-system.conf needs to be passed in FILES, otherwise the following QA error is seen: ERROR: pulseaudio-17.0-r0 do_package: QA Issue: pulseaudio: Files/directories were installed but not shipped in any package: /usr/share/dbus-1 /usr/share/dbus-1/system.d /usr/share/dbus-1/system.d/pulseaudio-system.conf (From OE-Core rev: 123c75bd87330a81ba5b929c35ae34710ddcc449) Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: fix CVE-2023-6228Yogita Urade2024-01-212-0/+32
| | | | | | | | | | | | | | | | | | CVE-2023-6228: An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash. References: https://nvd.nist.gov/vuln/detail/CVE-2023-6228 https://gitlab.com/libtiff/libtiff/-/issues/606 (From OE-Core rev: 55735e0d75820d59e569a630679f9ac403c7fdbe) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mpg123: upgrade 1.32.3 -> 1.32.4Wang Mingyu2024-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - build: -- Reorganize shared headers, API headers into src/include. -- Use relative include paths, avoiding internal directories in CPPFLAGS except for config.h. -- Group C99 feature checks and make several standard headers mandatory. -- Get rid of SIZE_P, OFF_P and friends. -- Only enforce dummy module together with libout123, to be able to build individual modules using --disable-components logic. - out123: -- added --libversion - libmpg123: -- Avoid indirect branches into the assembly routines by using C wrappers also for dct36, relieving us of the need to care for bti / endbr instructions for control flow integrity. (From OE-Core rev: cd5f6dcf796cace20e459a1d7c8ac93f1a4aee1e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: upgrade 6.1 -> 6.1.1Wang Mingyu2024-01-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - avcodec/mpegvideo_enc: Dont copy beyond the image - avfilter/vf_minterpolate: Check pts before division - avfilter/avf_showwaves: Check history_nb_samples - avformat/flacdec: Avoid double AVERRORS - avfilter/vf_vidstabdetect: Avoid double AVERRORS - avcodec/vaapi_encode: Avoid double AVERRORS - avfilter/vf_swaprect: round coordinates down - avfilter/vf_swaprect: Use height for vertical variables - avfilter/vf_swaprect: assert that rectangles are within memory - avfilter/af_alimiter: Check nextpos before use - avfilter/f_reverse: Apply PTS compensation only when pts is available - avfilter/af_stereowiden: Check length - avformat/mov: Fix MSAN issue with stsd_id - avcodec/jpegxl_parser: Check get_vlc2() - avfilter/vf_weave: Fix odd height handling - avfilter/edge_template: Fix small inputs with gaussian_blur() - avfilter/vf_gradfun: Do not overread last line - avfilter/avf_showspectrum: fix off by 1 error - avcodec/jpegxl_parser: Add padding to cs_buffer - avformat/mov: do not set sign bit for chunk_offsets - avcodec/jpeglsdec: Check Jpeg-LS LSE - avcodec/osq: Implement flush() - configure: Enable section_data_rel_ro for FreeBSD and NetBSD aarch64 / arm - avcodec/cbs_h266: more restrictive check on pps_tile_idx_delta_val - avcodec/jpeg2000htdec: check if block decoding will exceed internal precision - tools/target_dec_fuzzer: Adjust threshold for VMIX - avcodec/av1dec: Fix resolving zero divisor - avformat/mov: Ignore duplicate ftyp - avformat/mov: Fix integer overflow in mov_read_packet(). - lavc/qsvdec: return 0 if more data is required - avcodec/jpegxl_parser: check ANS cluster alphabet size vs bundle size - libavformat/vvc: Make probe more conservative - hwcontext_vulkan: guard unistd.h include - lavc/Makefile: build vulkan decode code if vulkan_av1 has been enabled - lavc/dvdsubenc: only check canvas size when it is actually set - avcodec/decode: validate hw_frames_ctx when AVHWAccel.free_frame_priv is used - avcoded/fft: Fix memory leak if ctx2 is used - avcodec/fft: Use av_mallocz to avoid invalid free/uninit (From OE-Core rev: e9ca6bdd43069c0b25115ae70dc09f0dda93ab1f) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* speexdsp: enable native variantAlexander Kanavin2024-01-071-0/+2
| | | | | | | | | | | | | | | Latest wireshark (4.2.0) is needed for python 3.12 support; it also requires speexdsp unconditionally, and wireshark-native for its own build helper tools in native versions. So speexdsp needs a native version so that wireshark-native builds without error. (From OE-Core rev: 44f2525e76ad5832faad1968037c8da8b6a285d2) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.22.7 -> 1.22.8Wang Mingyu2023-12-3011-11/+11
| | | | | | | (From OE-Core rev: 132d8b7e0188aae8849ae43cfffabce4389a55df) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: Backport fixes for CVE-2023-6277Khem Raj2023-12-064-0/+228
| | | | | | | | (From OE-Core rev: d115e17ad7775cf5bbfd402e98e61f362ac96efa) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mpg123: upgrade 1.31.3 -> 1.32.3Alexander Kanavin2023-11-301-2/+1
| | | | | | | | | | --disable-lfs-alias removed upstream. (From OE-Core rev: cc50d6939f678326ae56fee96267bc992b32bcdd) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.22.6 -> 1.22.7Anuj Mittal2023-11-2311-11/+11
| | | | | | | | (From OE-Core rev: f6be55ef1e862d93d8275fb5792e6c66b0a0beee) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Upgrade 6.0 -> 6.1Markus Volk2023-11-203-116/+2
| | | | | | | | | | -Remove patches that made it upstream (From OE-Core rev: faa32bbb35e92a14b8064715c12e1007fd106b34) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: drop PE, PR from /usr/src/debug pathsMartin Jansa2023-11-201-1/+1
| | | | | | | | (From OE-Core rev: 25f821023c057ed2632ed1f99a6e28dfe857a5d8) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: fix CVE-2022-33065Alex Stewart2023-10-232-0/+740
| | | | | | | | (From OE-Core rev: f34991c7eeb91702a44ac8b4a190fcb45dac57cb) Signed-off-by: Alex Stewart <alex.stewart@ni.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer: upgrade 1.22.5 -> 1.22.6Archana Polampalli2023-10-0611-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release only contains bugfixes and security fixes. Highlighted bugfixes in 1.22.6: Security fixes for the MXF demuxer and H.265 video parser Fix latency regression in H.264 hardware decoder base class androidmedia: fix HEVC codec profile registration and fix coded_data handling decodebin3: fix switching from a raw stream to an encoded stream gst-inspect: prettier and more correct signal and action signals printing rtmp2: Allow NULL flash version, omitting the field, for better RTMP server compatibility rtspsrc: better compatibility with buggy RTSP servers that don't set a clock-rate rtpjitterbuffer: fix integer overflow that led to more packets being declared lost than have been lost v4l2: fix video encoding regression on RPi and fix support for left and top padding waylandsink: Crop surfaces to their display width height cerbero: recognise Manjaro; add Rust support for MSVC ARM64; cmake detection fixes various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements https://nvd.nist.gov/vuln/detail/CVE-2023-40475 https://nvd.nist.gov/vuln/detail/CVE-2023-40476 https://gstreamer.freedesktop.org/releases/1.22/#1.22.6 (From OE-Core rev: ff2fc789e08c42903f5e528d4836dd482227291c) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: upgrade 4.5.1 -> 4.6.0Alexander Kanavin2023-09-263-101/+1
| | | | | | | | (From OE-Core rev: 9e80f93ada4eae638350d86b8aa514203f757d43) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Drop remaining PR values from recipesRichard Purdie2023-09-222-2/+0
| | | | | | | | | | | | | | | | We've been removing PR values from recipes at upgrade time for a while. In general anyone maintaining a binary distro would end up having to curate these themselves so the values in OE-Core aren't really that useful anymore. In many ways it makes sense to clear out the remaining ones (which are mostly for 'config' recipes that are unlikely to increase in PV) and leave a clean slate for anyone implementing a binary distro config. References are left in meta-selftest since the tests there do involve them and their removal upon upgrade. (From OE-Core rev: d4c346e8ab8f3cae25d1b01c7331ed9f6d4f96ef) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: fix patch Upstream-StatusMichael Opdenacker2023-09-211-1/+1
| | | | | | | | | | Using "Backport" instead of "Accepted", as instructed on https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes (From OE-Core rev: eb730ca78c6408513f3443d5017c3ae1504ae323) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-utils: update patch Upstream-StatusMichael Opdenacker2023-09-202-2/+2
| | | | | | | (From OE-Core rev: 131ffd88428070837b1b40d54a2fb0b7ce846516) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-utils: upgrade 1.2.9 -> 1.2.10Michael Opdenacker2023-09-205-78/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - po: add Korean translations - alsactl: fix compilation when building in a subdir - reshuffle included files to include config.h as first - github: update build.yml - aseqdump: fix MIDI 2.0 code - it compiles now - gitcompile: set more verbose compilation warnings - nhlt-dmic-info: fix the verbose compilation warnings for latest gcc - alsaucm: fix the verbose compilation warnings for latest gcc - aplaymidi: fix the verbose compilation warnings for latest gcc - aseqnet: fix the verbose compilation warnings for latest gcc - aseqdump: fix the verbose compilation warnings for latest gcc - aconnect: fix the verbose compilation warnings for latest gcc - speaker-test: fix the verbose compilation warnings for latest gcc - amidi: fix the verbose compilation warnings for latest gcc - bat: fix the verbose compilation warnings for latest gcc - iecset: fix the verbose compilation warnings for latest gcc - alsamixer: fix the verbose compilation warnings for latest gcc - alsaloop: fix the verbose compilation warnings for latest gcc - axfer: fix the verbose compilation warnings for latest gcc - alsactl: fix the verbose compilation warnings for latest gcc - amixer: fix the verbose compilation warnings for latest gcc - aplay: fix the verbose compilation warnings for latest gcc - topology: fix the verbose compilation warnings for latest gcc - alsactl: fix the copy-n-paste typo (SND_RAWMIDI_STREAM_*) - aseqdump: Add options to switch view mode - aseqdump: Correct wrong channel number - aseqdump: Align outputs of UMP MIDI 1.0 with legacy MIDI 1.0 - speaker-test: allow large buffer and period time setup - up to 100 seconds - topology: plugins: nhlt: remove dmic error print - Topology: NHLT: Intel: Update DMIC FIR coefficients - topology: nhlt: intel: support more device types and directions - topology: pre-processor: Add support for CombineArrays - alsactl: add define to compile with glibc 2.38 - topology: plugins: nhlt: set dmic stereo mode only in hw version 1 - aplaymidi: Add UMP support - aconnect: Add UMP support - aseqdump: Add UMP support - nhlt: add nhlt-dmic-info utility (From OE-Core rev: 24b7cd2e58c0a2f48cefb09a3363fd982d50f575) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: upgrade 1.2.9 -> 1.2.10Michael Opdenacker2023-09-202-2/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - Fix symver build error on non-ELF platforms - ucm: main - remove cast to pointer from integer of different size warning - ucm: mark internal functions static - topology: fix src/mixer/mixer.c return value warning - dogyxen: fix topology.h warnings - doxygen: fix broken examples links - doxygen: include docs for shmarea functions - doxygen: conf: do not hide PCM specific function - doxygen: silence warning from asoundlib.h - doxygen: ucm: silence warnings - doxygen: topology: silence 'not documented' warnings - doxygen: global: silence 'not documented' warnings - doxygen: namehint: silence 'not documented' warnings - doxygen: seq: silence 'not documented' warnings - doxygen: conf: silence 'not documented' warnings - doxygen: rawmidi: silence 'not documented' warnings - doxygen: control: silence 'not documented' item warnings - doxygen: pcm: silence 'not documented' warnings - doxygen: include external control docs - doxygen: fix inadvertent link requests - doxygen: fix list indentation errors - doxygen: escape xml tags - doxygen: fix image path - doxygen: fix broken parameter name tags - doxygen: Fix missing group end markers - reshuffle included files to include config.h as first - configure: add AC_SYS_LARGEFILE - seq: Fix wrong seq version update at snd_seq_hw_get_client_info() - seq: Add overflow check in snd_seq_ev_set_ump_data() - test: oldapi - fix the clang-16 compilation error - rawmidi: Suppress error messages for non-fatal errors - seq: ump: Fix typo in function name containing "group" - pcm: hw: fix minor bug in sw_params ioctl - seq: Add UMP 1.1 features - ump: Add UMP 1.1 features - uapi: Update rawmidi API to 2.0.4 - seq: Add UMP support - uapi: Update asequencer.h definitions for 1.0.3 - ump: Add helpers for handling SysEx data - ump: Add helpers to parse / set UMP packet data - control: Add UMP Endpoint and Block info query support - control: Add UMP device query support -- ump: Add initial support - rawmidi: Add UMP ioctl support - uapi: Update control API to 2.0.9 - uapi: Update rawmidi API to 2.0.3 - remove extra trailing new line in SNDMSG and SNDERR calls - usecase: add CaptureMicInfoFile field to documentation - include: fix SND_DLSYM_BUILD_VERSION() for static build - pcm: hw - prevent divide by zero for broken apps (From OE-Core rev: 232b6b7276b6b34edd1aa5292897a92e16235ecf) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libwebp: upgrade to 1.3.2Ross Burton2023-09-201-1/+1
| | | | | | | | | | | This is a point release with just one change: * security fix for lossless decoder (chromium: #1479274, CVE-2023-4863) (From OE-Core rev: 4ae14143eb7d1d74798ff921d90a0effbac89546) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: dont include consolekit for systemdMarkus Volk2023-09-201-1/+1
| | | | | | | | | | Consolekit is not needed for systemd and getting it installed by default can be disturbing. (From OE-Core rev: ed8a0c9ff5cbde3b2bd882a49b4a861ddb3230ce) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: fix CVE-2023-41175Yogita Urade2023-09-202-0/+64
| | | | | | | | | | | | | | libtiff: potential integer overflow in raw2tiff.c References: https://bugzilla.redhat.com/show_bug.cgi?id=2235264 https://security-tracker.debian.org/tracker/CVE-2023-41175 https://gitlab.com/libtiff/libtiff/-/issues/592 (From OE-Core rev: 4ee806cbc12fbc830b09ba6222e96b1e5f24539f) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: fix CVE-2023-40745Yogita Urade2023-09-202-1/+38
| | | | | | | | | | | | | | libtiff: integer overflow in tiffcp.c References: https://security-tracker.debian.org/tracker/CVE-2023-40745 https://gitlab.com/libtiff/libtiff/-/issues/591 https://bugzilla.redhat.com/show_bug.cgi?id=2235265 (From OE-Core rev: c3d4fbeb51278a04a6800c894c681733ad2259ca) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-ucm-conf: upgrade 1.2.9 -> 1.2.10Wang Mingyu2023-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== Fix symver build error on non-ELF platforms doxygen: include docs for shmarea functions doxygen: silence warning from asoundlib.h doxygen: global: silence 'not documented' warnings doxygen: Fix missing group end markers configure: add AC_SYS_LARGEFILE seq: Add UMP 1.1 features seq: Add UMP support ump: Add helpers to parse / set UMP packet data control: Add UMP Endpoint and Block info query support control: Add UMP device query support ump: Add initial support include: fix SND_DLSYM_BUILD_VERSION() for static build (From OE-Core rev: 608d5afcc7df5f2457fadc2496347ddeb9c0be11) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: avoid neon on unsupported machinesBenjamin Bara2023-09-041-0/+2
| | | | | | | | | | Disable neon if the machine does not support it. (From OE-Core rev: 0c3a6a74531d3860a3849a1f53f6709d6a0e88a5) Signed-off-by: Benjamin Bara <benjamin.bara@skidata.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: upgrade 1.2.0 -> 1.2.2Wang Mingyu2023-09-021-1/+1
| | | | | | | | | | | | | Changelog: ========= * Fixed invalid regex in src/create_symbols_file.py * Fixed passing null pointer to printf %s in tests (From OE-Core rev: ff22e9ae6a237d8c48aa9eaee65de3157f52307b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes/classes/scripts: Drop SRCPV usage in OE-CoreRichard Purdie2023-08-241-1/+1
| | | | | | | | Now that SRCPV isn't needed we can simplify things in a few places... (From OE-Core rev: 843f82a246a535c353e08072f252d1dc78217872) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.22.4 -> 1.22.5Anuj Mittal2023-08-2111-11/+11
| | | | | | | (From OE-Core rev: a894c9499863f127380c38f0b17d51b356391821) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: add CVE_STATUS for CVE-2023-39018Narpat Mali2023-08-211-0/+7
| | | | | | | | | | | | | | | | | | | | | | CVE-2023-39018 belongs to ffmpeg-cli-wrapper (Java wrapper around the FFmpeg CLI) and not ffmpeg itself. As per CVE description, it is mentioned as FFmpeg 0.7.0 which is the version for ffmpeg-cli-wrapper and ffmpeg don't have 0.7.0 version at all. Debian & Bugzilla trackers have already marked as NOT-FOR-US/RESOLVED-INVALID. As it won't be affecting the ffmpeg package so, we can ignore the CVE-2023-39018 in ffmpeg recipe. References: https://github.com/bramp/ffmpeg-cli-wrapper https://github.com/FFmpeg/FFmpeg https://security-tracker.debian.org/tracker/CVE-2023-39018 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-39018 (From OE-Core rev: c21ed498b423c13463a4ae0bb475883cc7901847) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: remove unused AUTHOR variableMichael Opdenacker2023-08-102-2/+0
| | | | | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. (From OE-Core rev: 9d5edd124b7dddb995ceddd79f8a7fc8cf44badf) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-utils: backport a fix to build with glibc-2.38Martin Jansa2023-08-042-0/+40
| | | | | | | | (From OE-Core rev: b2cc6f150d68ffcdb7e767b94731bc2ff258e4de) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Fix wrong code found with gas/2.41Khem Raj2023-08-012-0/+78
| | | | | | | | (From OE-Core rev: 692e414aed5313ff275b69e93179aa7c559700f3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Use bfd linker on i386 when lld is distro linker defaultKhem Raj2023-07-271-0/+1
| | | | | | | | (From OE-Core rev: fc155090b8cfb62f1114b3e5f86fc4dacfb3bc89) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-212-5/+2
| | | | | | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Reviewed-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libwebp: upgrade 1.3.0 -> 1.3.1Wang Mingyu2023-07-142-60/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2023-1999.patch removed since it's included in 1.3.1 Changelog: ========== This is a binary compatible release. * security fixes for lossless encoder (#603, chromium: #1420107, #1455619, CVE-2023-1999) * improve error reporting through WebPPicture error codes * fix upsampling for RGB565 and RGBA4444 in NEON builds * img2webp: add -sharp_yuv & -near_lossless * Windows builds: - fix compatibility with clang-cl (#607) - improve Arm64 performance with cl.exe - add Arm64EC support * fix webp_js with emcc >= 3.1.27 (stack size change, #614) * CMake fixes (#592, #610, #612) * further updates to the container and lossless bitstream docs (#581, #611) (From OE-Core rev: 15411fb32b5a3c0ac9c06ff89db5664799f55d77) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: upgrade to 4.5.1Ross Burton2023-07-104-178/+2
| | | | | | | | | | Also remove old CVE_CHECK_IGNOREs which are no longer needed due to CPE updates. (From OE-Core rev: 2200fde7011c4206382150c2602b2eb17423d45e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* alsa-lib: Disable old API symbolsKhem Raj2023-07-101-1/+1
| | | | | | | | | | | | | | These symbols are currently generated as undefined in the shared object, which means we really do not need them. (From OE-Core rev: a704ba641078d4b31da9d9af13e10c576f4a0b48) (From OE-Core rev: 291656940034f97c2276b7e1acdd1cc30b378cdf) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpng: upgrade 1.6.39 -> 1.6.40Anuj Mittal2023-07-101-2/+2
| | | | | | | | | License-Update: Change in copyright dates (From OE-Core rev: 91c7eadac2521f10e33b48579ff1510e3ae075c8) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Fix build on riscvKhem Raj2023-07-102-1/+37
| | | | | | | (From OE-Core rev: 5f2dfecab15142b659b09edd7673f4714626513b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>