linux/meta-openembedded.git/meta-oe/recipes-multimedia, branch whinlatterMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=whinlatter2026-04-24T15:43:21+00:00libdvdread: use https for fetching code2026-04-24T15:43:21+00:00Markus Volkf_l_k@t-online.de2026-04-18T14:35:31+00:00urn:sha1:50cde1e6496421f242bcc6a07b093fb24c197635
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 7bf89d06a41405b48fa3af260da36bc686973afc)
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
libjxl: mark CVE-2025-12474 and CVE-2026-1837 patched2026-03-09T11:44:04+00:00Gyorgy Sarvariskandigraun@gmail.com2026-03-09T09:19:55+00:00urn:sha1:9f2fe367d85d79b9799fd3a158962be7e3d1d425
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-12474
https://nvd.nist.gov/vuln/detail/CVE-2026-1837
Both CVEs have been fixed in v0.11.2, but NVD tracks these
vulnerabilities without version information.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
libjxl: upgrade 0.11.1 -> 0.11.22026-03-06T04:39:08+00:00Ankur Tyagiankur.tyagi85@gmail.com2026-02-24T19:04:48+00:00urn:sha1:592de481e62cff3a45c59887dbacd4167882f17f
- fix tile dimension in low memory rendering pipeline (CVE-2025-12474)
- fix number of channels for gray-to-gray color transform (CVE-2026-1837)
- djxl: reject decoding JXL files if "packed" representation size overflows
size_t
https://github.com/libjxl/libjxl/releases/tag/v0.11.2
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
libcdio: patch CVE-2024-366002026-02-03T02:37:26+00:00Gyorgy Sarvariskandigraun@gmail.com2026-02-02T21:13:56+00:00urn:sha1:fa4ceb7b5d4c0d422a5dac0cf60fbbedacbef6f7
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600
Backport the patch from the PR that is referenced in the NVD advisory.
Note that there are two PRs mentioned: one is the fix, and the other
is just readme update with the CVE ID. The latter wasn't backported.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
libjxl: Fix build error with arm and musl2026-01-20T04:45:19+00:00Ankur Tyagiankur.tyagi85@gmail.com2026-01-19T08:27:40+00:00urn:sha1:351df9d54ea69d8104a4700a4507369e7c00f606
Build fails for qemuarm with musl with following error:
/build/tmp/work/cortexa15t2hf-neon-poky-linux-musleabi/libjxl/0.11.1/sources/libjxl-0.11.1/lib/jxl/convolve_separable5.cc
| error: out of range pc-relative fixup value
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 63ae47a70d6d81937f5122c535d890678ed3c13e)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
audiofile: Fix build with clang++2025-11-14T15:36:56+00:00Khem Rajraj.khem@gmail.com2025-11-14T08:24:50+00:00urn:sha1:78f49691d74db266fc94ac5581eb71d71c7c45e0
When tests are enabled additional C++ code is compiled and clang does
not like the code.
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: patch CVE-2018-13440 and CVE-2018-170592025-11-14T15:36:56+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-14T08:24:49+00:00urn:sha1:e16a7d11d1dc0c577cb17652085b0c183c791883
Details:
https://nvd.nist.gov/vuln/detail/CVE-2018-13440
https://nvd.nist.gov/vuln/detail/CVE-2018-17059
The patches have been backported from Debian - upstream
has been inactive for almost a decade by now.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: backport test for CVE-2015-77472025-11-14T15:36:56+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-14T08:24:48+00:00urn:sha1:6c98db2449a52de0f9533ab84e31c7a1d2bd7e49
This is a backported patch from opensuse, which contains a testcase
for CVE-2015-7747 (which is already patched in ths recipe, but not
tested explicitly).
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: add ptest support2025-11-14T15:36:55+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-14T08:24:47+00:00urn:sha1:85ded08df0ad850928eea9919674161d94da5454
It's under 15 seconds to execute it.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
audiofile: patch CVE-2019-13147 and CVE-2022-245992025-11-14T15:36:55+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-14T08:24:46+00:00urn:sha1:8ef997336aec6f51318f1a7fa55d57e3990914e8
Details: https://nvd.nist.gov/vuln/detail/CVE-2019-13147
https://nvd.nist.gov/vuln/detail/CVE-2022-24599
These patches are used by opensuse to mitigate the corresponding vulnerabulities.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>