<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-multimedia/libmad/libmad_0.15.1b.bb, branch master</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2025-06-25T13:44:52+00:00</updated>
<entry>
<title>meta-openembedded/all: adapt to UNPACKDIR changes</title>
<updated>2025-06-25T13:44:52+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex@linutronix.de</email>
</author>
<published>2025-06-20T14:06:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=fc78d37ff0ce9e0d60455465851dbe4e86d7a8b3'/>
<id>urn:sha1:fc78d37ff0ce9e0d60455465851dbe4e86d7a8b3</id>
<content type='text'>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.

I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: patch CVE-2017-8372 and CVE-2017-8373</title>
<updated>2025-03-21T02:36:50+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-03-20T23:14:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=60eb0214e71c5f761d450bcc484b57df6955bd09'/>
<id>urn:sha1:60eb0214e71c5f761d450bcc484b57df6955bd09</id>
<content type='text'>
Pick patch [1] from Debian based on [2].

[1] https://salsa.debian.org/multimedia-team/libmad/-/raw/debian/0.15.1b-11/debian/patches/length-check.patch?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8374

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: patch CVE-2017-8372 and CVE-2017-8373</title>
<updated>2025-03-21T02:36:50+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-03-20T23:14:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=437635f608f2d9b69fefcde9ebfcff2bab64d35e'/>
<id>urn:sha1:437635f608f2d9b69fefcde9ebfcff2bab64d35e</id>
<content type='text'>
Pick patch [1] from Debian based on [2] and [3].

[1] https://salsa.debian.org/multimedia-team/libmad/-/blob/debian/0.15.1b-11/debian/patches/md_size.diff?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8372
[3] https://security-tracker.debian.org/tracker/CVE-2017-8373

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: ignore CVE-2017-11552 and CVE-2018-7263</title>
<updated>2025-03-21T02:36:50+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-03-20T23:14:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=fee86a312fbcaef7aaad66fe2f6756bd7e57d585'/>
<id>urn:sha1:fee86a312fbcaef7aaad66fe2f6756bd7e57d585</id>
<content type='text'>
These CVEs are for mpg321, not libmad.
See Debian assessment:
* https://security-tracker.debian.org/tracker/CVE-2017-11552
* https://security-tracker.debian.org/tracker/CVE-2018-7263

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: extend CVE_PRODUCT</title>
<updated>2025-03-21T02:36:50+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-03-20T23:14:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=0dcbb0b5d4d1f4e1365c72e7817b86240f4a8158'/>
<id>urn:sha1:0dcbb0b5d4d1f4e1365c72e7817b86240f4a8158</id>
<content type='text'>
Catch more CVEs by adding additional product per

sqlite&gt; select vendor, product, count(*) from products where product like '%libmad%' group by vendor, product;
underbit|libmad|1
underbit|mad_libmad|4

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: switch links/SRC_URI to https sites</title>
<updated>2024-04-09T20:56:27+00:00</updated>
<author>
<name>Randy MacLeod</name>
<email>Randy.MacLeod@windriver.com</email>
</author>
<published>2024-04-09T20:25:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=f61cc5260954e840494194805f6f957f60cd4833'/>
<id>urn:sha1:f61cc5260954e840494194805f6f957f60cd4833</id>
<content type='text'>
Switch to the sourceforge SRC_URI since the mars.org site only supports ftp.
Also switch the HOMEPAGE and BUGTRACKER links over to https.
and drop the obsolete SRC_URI[md5sum].

Signed-off-by: Randy MacLeod &lt;Randy.MacLeod@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>recipes: Drop remaining PR values from recipes</title>
<updated>2024-03-17T20:10:10+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2024-03-15T05:37:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=e722be5facd8bdfb43ee08665dc2e2d38d6d5853'/>
<id>urn:sha1:e722be5facd8bdfb43ee08665dc2e2d38d6d5853</id>
<content type='text'>
* as oe-core did in:
  https://git.openembedded.org/openembedded-core/commit/?id=d4c346e8ab

* when people are have to maintain own PRs for recipes in oe-core, they
  might add them for meta-oe recipes at the same time when upgrading
  to next LTS

Signed-off-by: Martin Jansa &lt;martin.jansa@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>libmad: Add a patch to pass cflags to build</title>
<updated>2023-05-17T05:31:14+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2023-05-16T17:33:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=0474e0b8705ee2048e92ed5874b83b2535dc9cd2'/>
<id>urn:sha1:0474e0b8705ee2048e92ed5874b83b2535dc9cd2</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>recipes: Update LICENSE variable to use SPDX license identifiers</title>
<updated>2022-03-05T01:41:45+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2022-03-04T08:44:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295'/>
<id>urn:sha1:14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>Convert to new override syntax</title>
<updated>2021-08-03T17:21:25+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>Martin.Jansa@gmail.com</email>
</author>
<published>2021-07-29T15:04:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=c61dc077bbd81260e4f167fa2251643ba0ba6974'/>
<id>urn:sha1:c61dc077bbd81260e4f167fa2251643ba0ba6974</id>
<content type='text'>
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
</feed>
