linux/meta-openembedded.git/meta-oe/recipes-multimedia/audiofile, branch styheadMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead2025-02-04T22:29:37+00:00audiofile: mark CVE-2020-18781 as patched2025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2025-01-17T19:33:21+00:00urn:sha1:35b9a267502abf00fee66e8f32477a5c2abab9c6
Per [1] this CVE is already patched by commit [2].
This can be also verified with yocto build.
Running without this patch:
root@qemux86-64:~# sfconvert poc.wav output format wave
malloc(): corrupted top size
Aborted
Running with it:
root@qemux86-64:~# sfconvert poc.wav output format wave
Audio File Library: Bad number of coefficients [error 62]
Could not open file 'poc.wav' for reading.
[1] https://github.com/mpruett/audiofile/issues/56
[2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 68f55c158e15a5d35702ae5c730586001e487f86)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
audiofile: patch CVE-2017-68392025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2024-12-27T10:56:15+00:00urn:sha1:23bd451257676e1eed3c78c8d837ce54f0332f7f
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/844a7c6281eb442881330a5d36d5a0719f2870bf
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 88faae83b2b0e68827c457f4f348f7d7868f5258)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
audiofile: patch CVE-2017-68312025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2024-12-27T10:56:14+00:00urn:sha1:2bdeebd11ff9dda947de4fa2bfd927ef5f9ef948
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/bd5f84d301c4e74ca200a9336eca88468ec0e1f3
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9d668989b1447fb19aff55c1a47acdf8d4e8c5e2)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
audiofile: fix multiple CVEs2025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2024-12-27T10:56:13+00:00urn:sha1:85c8b0ab7a5272da4c4976e3aeaedb0b5e4d907c
CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/4a1a8277bba490d227f413e218138e39f1fe1203
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 75f2bd2b3b145d8282db9926d8212c6d81bde99e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
audiofile: patch CVE-2017-68292025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2024-12-27T10:56:12+00:00urn:sha1:beefbac3d79f6030a194667dd1290107a6735a0a
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/434890df2a7c131b40fec1c49e6239972ab299d2
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f29fbaa4650201a059c65572947ed8faa991fcd8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
audiofile: fix multiple CVEs2025-02-04T22:29:37+00:00Peter Markopeter.marko@siemens.com2024-12-27T10:56:11+00:00urn:sha1:9ed3377c2c17ff8441ae5f6707d3885ca37e66f1
CVE-2017-6827 / CVE-2017-6828 / CVE-2017-6832 / CVE-2017-6833 / CVE-2017-6835 / CVE-2017-6837
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/cc00bde57fc20d11f8fa4e8ec5f193c091714c55
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 634cbcb91c3ab7154e0cda707663a1e4aa500f4a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
*.patch: add Upstream-Status to all patches2023-06-21T16:15:20+00:00Martin JansaMartin.Jansa@gmail.com2023-06-21T16:09:11+00:00urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a
This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).
This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.
This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:
5 (26%) meta-xfce
6 (50%) meta-perl
15 (42%) meta-webserver
21 (36%) meta-gnome
25 (57%) meta-filesystems
26 (43%) meta-initramfs
45 (45%) meta-python
47 (55%) meta-multimedia
312 (63%) meta-networking
756 (61%) meta-oe
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: Stick to c++14 std2023-01-21T18:02:02+00:00Khem Rajraj.khem@gmail.com2023-01-18T07:06:34+00:00urn:sha1:195c2045fdf8b9ba8114651efd849bccc9308d1f
It uses std::unary_function which is removed from c++17 onwards, until
this is removed/replaced we can not move beyond c++14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
recipes: Update LICENSE variable to use SPDX license identifiers2022-03-05T01:41:45+00:00Khem Rajraj.khem@gmail.com2022-03-04T08:44:20+00:00urn:sha1:14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: Inherit pkgconfig instead of binconfig2017-06-12T04:56:43+00:00Khem Rajraj.khem@gmail.com2017-06-02T04:41:05+00:00urn:sha1:93ff33b564425e4a5bbe4b7535a213ff59d8081a
Fixes build with musl
../audiofile-0.3.6/configure: line 16964: PKG_PROG_PKG_CONFIG: command not found
../audiofile-0.3.6/configure: line 16971: syntax error near unexpected token `FLAC,'
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>