summaryrefslogtreecommitdiffstats
path: root/meta/recipes-multimedia
Commit message (Collapse)AuthorAgeFilesLines
...
* pulseaudio: enforce empty PNRoss Burton2019-01-111-0/+1
| | | | | | | | | | The intention is that PN is empty, enforce that so new files don't end up in PN silently. (From OE-Core rev: b302e1556535601dbb5a18d02e6988a17fda5fbc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: improve reproducibilityHongxu Jia2019-01-114-2/+196
| | | | | | | | | | | | | There are two fixes, one is sent to upstream, and another is oe specific. [YOCTO #12638] (From OE-Core rev: 81e3d7bdafc9a8af8d0618a852fc67e938f5d18e) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: Security fix CVE-2017-17456/17457 CVE-2018-19661/19662Changqing Li2019-01-082-0/+102
| | | | | | | | | | fix 4 CVEs, which is backport from https://github.com/erikd/libsndfile/commit/585cc28a93be27d6938f276af0011401b9f7c0ca (From OE-Core rev: 8f4af329df5373db8910726a6b954652623003dd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Backport patch to fix build with gcc9Khem Raj2018-12-272-0/+32
| | | | | | | (From OE-Core rev: 545b58b9169aad38ad6c180b1fa690f878d6781a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpng: upgrade 1.6.35 -> 1.6.36Anuj Mittal2018-12-201-4/+4
| | | | | | | | | | | | | | | | | | | | | For changes, see: https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES License-Update: Added authors to license, formatting, version changes, export classification clarification and a new libpng2 license with clarification: The new libpng license comprises the terms and conditions from the zlib license, and the disclaimer from the Boost license. The legacy libpng license license, used until libpng-1.6.35, is appended to the new license, following the precedent established in the Python Software Foundation License version 2. (From OE-Core rev: 099aecfaa3baf6b24c2b751da92d7d2fa0266bf9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-vaapi: downgrade vaapisink to marginal rankAnuj Mittal2018-12-012-1/+48
| | | | | | | | | | | | | | | | | | Using vaapisink (which doesn't supports DRI3 [1] and uses DRI2) with default poky configuration currently results in an unresponsive display because DRI2 rendering doesn't work (as of xserver 1.20.3) in non-composited environments [2]. Downgrade vaapisink to marginal for now so playbin (and in turn gst-play and gtk-play examples) uses next best sink element and works out of box. [1] https://github.com/intel/libva/issues/122 [2] https://gitlab.freedesktop.org/xorg/xserver/issues/13 (From OE-Core rev: 7911039a3a82a29166f3be2ff5bdd719430e5a80) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-validate: upgrade 1.14.2 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 21387613fec1a8c142ed48d7a74d587e205b0c98) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-python: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 454129a0dc8eabb53753f9d416cf7271c796acf4) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 9b613f029490a3540492393206be004b649c0806) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-rtsp-server: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 8a73dc7da63bbd3c57bde2a3733d172d784e5f46) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-vaapi: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 9caacfe4c3ef92f3701f24ff3c924f50adb5f9de) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 14370389a50bda84eee7b3a024709fd43fc7c5aa) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-ugly: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: d1e5c9b85f980e747c9d6c5682448e0756bd25cd) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 74d9bd02f41d555317eef6b82e94f351ffc61529) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: adeec11d875a5603bd64b9bfb888da5cdb7631e5) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-base: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | (From OE-Core rev: 868059f052547a73e428fe8d4066dc4412e29478) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade 1.14.3 -> 1.14.4Anuj Mittal2018-11-271-2/+2
| | | | | | | | | | | | | | This release only contains bugfixes and it should be safe to update from 1.14.x. Release notes: https://gstreamer.freedesktop.org/releases/1.14/ (From OE-Core rev: 4286f191c4b10cf5f3a14ed391902a11a9d61a09) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-plugins-bad: add PACKAGECONFIG for msdkAnuj Mittal2018-11-271-2/+2
| | | | | | | | | | | gst-msdk is a plugin for Intel Media SDK. More details: https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/tree/sys/msdk/README (From OE-Core rev: c138fa26dde7fca5b366ab69bac84359ebbd0fd7) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libwebp: update to 1.0.1Alexander Kanavin2018-11-231-2/+2
| | | | | | | (From OE-Core rev: 67ae24f82279bb304b747e953a2b65ae5d46cad2) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: update to 4.0.10Alexander Kanavin2018-11-239-679/+16
| | | | | | | (From OE-Core rev: 92a2e6dc73085ccb5482986c6b61d40992fb4f50) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-python: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: 750e03a231eb3bcf31c30cf67ff80a6bc821ee66) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: ea4882b89500d9da8d7a731968ea7a311737f6ea) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-vaapi: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: c3d863f4f989461c61e7d61259423fe0e8202eed) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-rtsp-server: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: f62a87b3c6638c6da764d19133eba552f2102bae) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: 4508d6f0befb1b91f9cfe74b0ca84c8fb5f79da5) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugin-ugly: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: aedec50bc8fb2ddcd1ea7cadbdd07f9d103840aa) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugin-bad: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: 22e124ef0b01c3aae75e8e29a3078cb42a47ae17) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugin-good: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: 63753e9c06641025ba4711af61a4f34e2388ec72) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugin-base: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: df2a0fd27a23ece636c018d007e2dcf9343fb7a8) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: upgrade to version 1.14.3Carlos Rafael Giani2018-11-191-2/+2
| | | | | | | | (From OE-Core rev: fb840932018cb449ee96904b8a2f17e7693a5669) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* x264: Disable asm on x86Mingli Yu2018-11-141-1/+1
| | | | | | | | | | | | | | The previous commit as below only fixes the textrel issue with musl on x86, update it also to fix the issue such as with glibc on x86. 74ea4f280c1 x264: Disable asm on musl/x86 [YOCTO #11770] (From OE-Core rev: 521af79d1d7635b4bd0ee2cc45b96729285bf469) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemux86/gstreamer: Move kernel module recommendation to the machine ↵Richard Purdie2018-10-181-2/+0
| | | | | | | | | | | | | | | | | | | configuration If you try to build a system with multiple BSPs, one of which is qemux86 or qemux86-64, the gstreamer package will change. This will trigger anything using gstream to also be rebuilt. For a package based system, the PR values will also be incremented each time. The end result will be an ever growing set of PR values as well as being unable to tell which configured version of the multimedia components are really being deployed. These therefore belong in the machine configuration. (From OE-Core rev: 112775995158cf6c504fd6beef345ee446f4f11d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: add openmpt packageconfigCarlos Rafael Giani2018-10-181-2/+2
| | | | | | | | (From OE-Core rev: b9ba5934c684ab320f9ec0b8d1f9ea301f383c1f) Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "gstreamer1.0-plugins-bad: remove rtmpdump from DEPENDS"Florian Wickert2018-10-161-1/+1
| | | | | | | | | | | | | This reverts commit aa6def606fcb239fa8997764cdf4ebb1ec27802d which I posted myself. The Problem is rtmpdump, not the gstreamer1.0-plugins-bad recipe. The correct to fix this is to patch rtmpdump to work with OpenSSL 1.1. (From OE-Core rev: 9b7c1d7ac9b2cbd3744776328386bfb4c90c1afc) Signed-off-by: Florian Wickert <fw@javox-solutions.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: CVE-2018-13139Changqing Li2018-10-102-0/+36
| | | | | | | | | | | A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28. Fixed in https://github.com/erikd/libsndfile/issues/397 (From OE-Core rev: 6b5a9078a7c5035590ee4dc2e23582da94d4a104) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* x264: Disable asm on musl/x86Khem Raj2018-10-091-0/+1
| | | | | | | | | | | | | | Fixes WARNING: x264-r2854+gitAUTOINC+e9a5903edf-r0 do_package_qa: QA Issue: ELF binary '/mnt/a/yoe/build/tmp/work/i586-yoe-linux-musl/x264/r2854+gitAUTOINC+e9a5903edf-r0/packages-split/x264/usr/lib/libx264.so.152' has relocations in .text [textrel] WARNING: x264-r2854+gitAUTOINC+e9a5903edf-r0 do_package_qa: QA Issue: ELF binary '/mnt/a/yoe/build/tmp/work/i586-yoe-linux-musl/x264/r2854+gitAUTOINC+e9a5903edf-r0/packages-split/x264-bin/usr/bin/x264' has relocations in .text [textrel] (From OE-Core rev: ea1204c6d9a02f0e38cf616e89d46530908972bb) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: use bfd linker always for x86 targetKhem Raj2018-10-091-0/+4
| | | | | | | | | | gold crashes when linking, so use bfd linker here, another option is to use --disable-asm but then we loose performance. (From OE-Core rev: 4015f3279aaced1c5d9ae8a6e666c9fba42558df) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtiff: fix CVE-2017-17095Joe Slater2018-10-042-0/+47
| | | | | | | | | | | Backport fix from gitlab.com/libtiff/libtiff. nvd.nist.gov does not yet reference this patch. (From OE-Core rev: f72c8af3f2c1ec9e4d9ffcf0cc6e7fdf572b21b9) Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: remove rtmpdump from DEPENDSFlorian Wickert2018-09-211-1/+1
| | | | | | | | | | | | rtmpdump is not a build dependency for gstreamer1.0-plugins-bad even if rtmp is enabled. This wouldn't compile anyway due to the openssl/openssl10 incompatibility because rtmpdump requires openssl10. (From OE-Core rev: f9b7de219ae03b48843f65a49d90822b33d34534) Signed-off-by: Florian Wickert <fw@javox-solutions.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-validate: Fix build on muslKhem Raj2018-09-112-0/+39
| | | | | | | | | | | | | | | | | | | | | Connect has different signature on musl. Fixes socket_interposer.c:103:1: error: conflicting types for 'connect' | connect (int socket, const struct sockaddr_in *addrin, socklen_t address_len) | ^ | recipe-sysroot/usr/include/sys/socket.h:327:5: note: previous declaration is here | int connect (int, const struct sockaddr *, socklen_t); | ^ (From OE-Core rev: 77c02f815103733bcfbde3adec3784e456de42d4) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: use nasm instead of yasmRoss Burton2018-09-101-1/+1
| | | | | | | | | | | The options are still called yasm and there's some cleanup to be done, but as libav can use both yasm and nasm let's unify on nasm (last release six months ago, fifteen RCs since) instead of yasm (last release 2014). (From OE-Core rev: 9343c02cc12aa210a1b7ae7696c83a5501c91ceb) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: use nasm instead of yasmRoss Burton2018-09-101-1/+1
| | | | | | | | | | As ffmpeg can use both yasm and nasm let's unify on nasm (last release six months ago, fifteen RCs since) instead of yasm (last release 2014). (From OE-Core rev: fe204ba16068c518a15c946c3d370dff8a2171c7) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: Fix CVE-2018-15822Mingli Yu2018-09-102-0/+38
| | | | | | | | | | Fixes: Assertion failure Fixes: assert_flvenc.c:941_1.swf (From OE-Core rev: 23393330a599403085437cb62169bb3a2375c07a) Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: 11.1 -> 12.2Tanu Kaskinen2018-08-294-150/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release notes for 12.0: https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/12.0/ 12.1 contains a few regression fixes: https://lists.freedesktop.org/archives/pulseaudio-discuss/2018-July/030259.html 12.2 is just a fixup for the configure script brokenness in the 12.1 tarball. qpaeq changed license from AGPL to LGPL, so now there's no AGPL licensed code any more. This removes the excuse to not enable fftw support (i.e. module-equalizer-sink and qpaeq). I'll enable fftw in a separate patch. There's a new gsettings module that should be enabled, but I'll do that in a separate patch. It's not particularly important, because the module is only used by the paprefs GUI application that doesn't seem to be packaged for OE at the moment. Removed upstreamed patches: 0001-padsp-Make-it-compile-on-musl.patch 0001-memfd-wrappers-only-define-memfd_create-if-not-alrea.patch License-Update: qpaeq changed license from AGPL to LGPL: https://gitlab.freedesktop.org/pulseaudio/pulseaudio/commit/61217528a1cb5043ca3fa1051a73ad3268cfb3d8 (From OE-Core rev: 9bc3a8ec4a007fe75dc8f44faf6357517b1fb020) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libid3tag: patch for CVE-2004-2779Changqing Li2018-08-292-0/+34
| | | | | | | (From OE-Core rev: e2bec1f7e05ec014bd887440521da7e1a13555be) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: CVE-2017-14634Jagadeesh Krishnanjanappa2018-08-232-0/+43
| | | | | | | | | | | | | | | | | | | | | | | | double64_init: Check psf->sf.channels against upper bound This prevents division by zero later in the code. While the trivial case to catch this (i.e. sf.channels < 1) has already been covered, a crafted file may report a number of channels that is so high (i.e. > INT_MAX/sizeof(double)) that it "somehow" gets miscalculated to zero (if this makes sense) in the determination of the blockwidth. Since we only support a limited number of channels anyway, make sure to check here as well. CVE-2017-14634 Closes: #318 Affects libsndfile1 = 1.0.28 (From OE-Core rev: eee93149a49274dc3deed7d89754ee4bda240575) Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsndfile1: CVE-2017-14245 CVE-2017-14246Jagadeesh Krishnanjanappa2018-08-232-0/+122
| | | | | | | | | | | | | | | | | | | sfe_copy_data_fp: check value of "max" variable for being normal and check elements of the data[] array for being finite. Both checks use functions provided by the <math.h> header as declared by the C99 standard. Fixes #317 CVE-2017-14245 CVE-2017-14246 Affects libsndfile1 = 1.0.28 (From OE-Core rev: ad842a3a0e6ef78fb9449362753ae3592c775192) Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpng: upgrade 1.6.34 -> 1.6.35Maxin B. John2018-08-231-4/+5
| | | | | | | | | License-Update: copyright years updated (From OE-Core rev: 2c245d0ddc230360be949b96fb123698541753ac) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* flac: patch for CVE-2017-6888Changqing Li2018-08-232-1/+40
| | | | | | | (From OE-Core rev: 82edd652860a2a1430692af402f0df639161b767) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libvorbis: 3 CVE fixesJoe Slater2018-08-163-0/+70
| | | | | | | | | | CVE-2017-14160, CVE-2018-10393 (same as 14160), and CVE-2018-10392. These fixes should be in libvorbis 1.3.7. (From OE-Core rev: 45ff20f325a51fe0ed12d58160c08e04781ce341) Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>