summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-multimedia
Commit message (Collapse)AuthorAgeFilesLines
* libdvdread: use https for fetching codeMarkus Volk2026-04-241-1/+1
| | | | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 7bf89d06a41405b48fa3af260da36bc686973afc) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libjxl: mark CVE-2025-12474 and CVE-2026-1837 patchedGyorgy Sarvari2026-03-091-0/+3
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-12474 https://nvd.nist.gov/vuln/detail/CVE-2026-1837 Both CVEs have been fixed in v0.11.2, but NVD tracks these vulnerabilities without version information. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libjxl: upgrade 0.11.1 -> 0.11.2Ankur Tyagi2026-03-061-2/+2
| | | | | | | | | | | | | - fix tile dimension in low memory rendering pipeline (CVE-2025-12474) - fix number of channels for gray-to-gray color transform (CVE-2026-1837) - djxl: reject decoding JXL files if "packed" representation size overflows size_t https://github.com/libjxl/libjxl/releases/tag/v0.11.2 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libcdio: patch CVE-2024-36600Gyorgy Sarvari2026-02-032-1/+35
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600 Backport the patch from the PR that is referenced in the NVD advisory. Note that there are two PRs mentioned: one is the fix, and the other is just readme update with the CVE ID. The latter wasn't backported. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libjxl: Fix build error with arm and muslAnkur Tyagi2026-01-201-0/+3
| | | | | | | | | | | | Build fails for qemuarm with musl with following error: /build/tmp/work/cortexa15t2hf-neon-poky-linux-musleabi/libjxl/0.11.1/sources/libjxl-0.11.1/lib/jxl/convolve_separable5.cc | error: out of range pc-relative fixup value Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 63ae47a70d6d81937f5122c535d890678ed3c13e) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* audiofile: Fix build with clang++Khem Raj2025-11-142-0/+42
| | | | | | | | When tests are enabled additional C++ code is compiled and clang does not like the code. Cc: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: patch CVE-2018-13440 and CVE-2018-17059Gyorgy Sarvari2025-11-143-0/+73
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2018-13440 https://nvd.nist.gov/vuln/detail/CVE-2018-17059 The patches have been backported from Debian - upstream has been inactive for almost a decade by now. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: backport test for CVE-2015-7747Gyorgy Sarvari2025-11-142-0/+167
| | | | | | | | | This is a backported patch from opensuse, which contains a testcase for CVE-2015-7747 (which is already patched in ths recipe, but not tested explicitly). Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: add ptest supportGyorgy Sarvari2025-11-142-1/+31
| | | | | | | It's under 15 seconds to execute it. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: patch CVE-2019-13147 and CVE-2022-24599Gyorgy Sarvari2025-11-143-0/+83
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2019-13147 https://nvd.nist.gov/vuln/detail/CVE-2022-24599 These patches are used by opensuse to mitigate the corresponding vulnerabulities. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmms: inherit sourceforge-releases classYi Zhao2025-11-121-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version libmms INFO: Current version: 0.6.4 INFO: Latest version: After the patch: $ devtool latest-version libmms INFO: Current version: 0.6.4 INFO: Latest version: 0.6.4 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* id3lib: update remote patch SRC_URIGyorgy Sarvari2025-11-081-4/+2
| | | | | | | | | The URL of the patch archive from Debian got out of date - update it. While touching it, also drop the old md5 hashes from the recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcdio-paranoia: upgrade 10.2+2.0.1 -> 10.2+2.0.2Ankur Tyagi2025-11-041-5/+6
| | | | | | | | | | The project switched to storing their releases on Github. Changelog: https://github.com/libcdio/libcdio-paranoia/releases/tag/release-10.2%2B2.0.2 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcdio: upgrade 2.1.0 -> 2.2.0Ankur Tyagi2025-11-043-89/+3
| | | | | | | | | | | | | | | | * The project switched to storing their releases on Github * Dropped patches which are now merged in the upstream * There is API, ABI change between 2.1.0 and 2.1.1 - API change: Rename some fields in ecma_167.h from integer (prefix i_) to unsigned (prefix u_) to actually match their type - ABI change: Add u_su_fields to the end of iso_rock_statbuf_t - ABI change: Add total_size in the middle of iso9660_stat_t Changelog: https://github.com/libcdio/libcdio/releases/tag/2.1.1 https://github.com/libcdio/libcdio/releases/tag/2.2.0 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: Fix Upstream-StatusLeon Anavi2025-10-242-2/+2
| | | | | | | | | Fix a minor typo in the patches by replacing "Upstrem-Status" with "Upstream-Status". The typo was not triggering a QA Issue because there is a second "Upstream-Status" line in each patch. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cdrkit: fix reproducibility issueChangqing Li2025-10-101-1/+3
| | | | | | | | | Normally CMake uses the build tree for the RPATH when building executables etc on systems that use RPATH. This will make the buildpath included in the binaries and not reproducible, so disable RPATHs. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpv: fix build with ffmpeg 8.0Markus Volk2025-09-162-0/+42
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjxl: Upgrade to 0.11.1Khem Raj2025-09-011-1/+5
| | | | | | Use -fno-integrated-as with clang on arm architecture Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplacebo: Fix build with latest python 3.14Khem Raj2025-08-132-1/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes FAILED: [code=1] src/vulkan/utils_gen.c /home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/bin/meson.real -- ↪ internal exe --unpickle /home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/meson-private/ ↪ meson_exe_nativepython3_7e48a7413404982655e79073cf3065c6194271bf.dat while executing ['/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/bin/ ↪ nativepython3', '../sources/libplacebo-7.351.0/src/vulkan/utils_gen.py', '/usr/share', '/home/kraj200/yoe/build/tmp/work/ ↪ riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot/usr/share/vulkan/registry/vk.xml', 'src/vulkan/utils_gen.c'] --- stdout --- --- stderr --- Traceback (most recent call last): File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/../sources/libplacebo-7.351.0/src/ ↪ vulkan/utils_gen.py", line 205, in <module> registry = VkXML(ET.parse(xmlfile)) File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/build/../sources/libplacebo-7.351.0/src/ ↪ vulkan/utils_gen.py", line 50, in __init__ super().__init__(*args, **kwargs) ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^ File "/home/kraj200/yoe/build/tmp/work/riscv64imafdc-yoe-linux/libplacebo/7.351.0/recipe-sysroot-native/usr/lib/python3.13/ ↪ xml/etree/ElementTree.py", line 527, in __init__ raise TypeError('expected an Element, not %s' % type(element).__name__) TypeError: expected an Element, not ElementTree Signed-off-by: Khem Raj <raj.khem@gmail.com>
* v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bitJiaying Song2025-07-282-4/+39
| | | | | | | | | | | | | | * Remove GLIBC_64BIT_TIME_FLAGS="" to enable _TIME_BITS=64 by default, which avoids the following QA issue during builds on 32-bit systems: WARNING: lib32-v4l-utils-1.24.1+git-r0 do_package_qa: QA Issue: /usr/bin/cec-compliance uses 32-bit api 'time' * Undefine _TIME_BITS to fix the build error: /usr/include/features-time64.h:26:5: error: #error "_TIME_BITS=64 is allowed only with _FILE_OFFSET_BITS=64" Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wavpack: Upgrade 5.6.0 -> 5.8.1 to allow CMake 4+ compatibilityAlper Ak2025-07-091-8/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | - Drop patches becaus already fixed in the newer version. - The LICENSE file has changed so updated LIC_FILES_CHKSUM to match the new md5sum. Changelog: https://github.com/dbry/WavPack/blob/5.8.1/ChangeLog Fix: | CMake Error at CMakeLists.txt:1 (cmake_minimum_required): | Compatibility with CMake < 3.5 has been removed from CMake. | | Update the VERSION argument <min> value. Or, use the <min>...<max> syntax | to tell CMake that the project requires at least <min> but has been updated | to work with policies introduced by <max> or earlier. | | Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway. | | | -- Configuring incomplete, errors occurred! Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cdrkit: Add patch for CMake 4+ compatibilityAlper Ak2025-07-082-0/+38
| | | | | | | | | | | | | | | | | | | Fix: | CMake Error in CMakeLists.txt: | No cmake_minimum_required command is present. A line of code such as | | cmake_minimum_required(VERSION 4.0) | | should be added at the top of the file. The version specified may be lower | if you wish to support older CMake versions for this project. For more | information run "cmake --help-policy CMP0000". | | | -- Configuring incomplete, errors occurred! Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-openembedded/all: adapt to UNPACKDIR changesAlexander Kanavin2025-06-2520-20/+7
| | | | | | | | | | | | | Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libvpx: upgrade 1.15.1 -> 1.15.2Wang Mingyu2025-06-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libass: upgrade 0.17.3 -> 0.17.4Wang Mingyu2025-06-091-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== - add new API to prune old events from memory - ass_prune_events for manual pruning - ass_configure_prune to set up automatic pruning - add ASS_OVERRIDE_BIT_BLUR flag - fontconfig: fix minor memory leaks in pathological font setups - coretext: fix build on older compilers or Mac OS X 10.5 - checkasm: fix build for older compilers - aarch64: fix assembly build on strict compilers due to oversized align - meson: improve ASM configuration on x86 Android - meson: align MSVC warnings and optimisations closer to gcc-like compilers - meson can now build all dev utility executables Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplacebo: update 7.349.0 -> 7.351.0Markus Volk2025-06-073-78/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release mainly introduces a variety of miscellaneous bug fixes, alongside two minor / maintenance changes. Additions: add pl_{opengl,vulkan,d3d11}_params.no_compute to suppress the use of compute shaders add pl_cache_{set,get}_file() Changes: libav vulkan interop now requires lavu 58.11.100+ and vulkan 1.2.175+ "sinc" filter preset radius dropped from 3 to 2 Fixes and performance enhancements: fix compilation of fuzzer test fix shader variable renaming loop fix error when the same gpu descriptor is used twice in one shader don't expose unsupported d3d11 formats fix rendering with flipped planes and user shaders fix rendering of textures with unusual channel order don't apply sigmoidization to alpha channel attach correctly normalized extension list to vulkan device creation fix orthogonal scaling fast path leaking garbage pixels some GLES 2.0 fixes fix DCDM XYZ decoding into DCI-P3 fix build with glslang 15 fix compilation without nuklear fix backwards compatibility with pl_render_params.skip_target_clearing correctly output requested alpha mode preserve alpha channel when blending subsampled formats multiply plane scale even when not scaling propagate correct plane format after plane merging fix build with instrumentation enabled fix bug where layout transitions happened too early in some cases fix handling of promoted extension and function names don't scale alpha when blending low bit depth YUV planes fix build error with recent libavformat fix plane channel order when merging planes invalidate shader cache when GL version strings change fix compute shader promotion for flipped outputs fix upload of YUVA formats with reduced bit depths Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libxmp: upgrade 4.6.2 -> 4.6.3Wang Mingyu2025-05-211-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplacebo: make use of virtual/libsdl2Markus Volk2025-04-251-1/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xsp: fix build error in gcc-15mark.yang2025-04-242-1/+43
| | | | | | | | | | | | | | | | | | | | | | * fix following build error in gcc-15: ../Xsp/Xsp.c:37:9: error: initialization of 'int (*)(Display *, XExtCodes *)' from incompatible pointer type 'int (*)(void)' [-Wincompatible-pointer-types] 37 | XSPCloseDisplay, /* close_display */ | ^~~~~~~~~~~~~~~ ../Xsp/Xsp.c:37:9: note: (near initialization for 'xsp_extension_hooks.close_display') ../Xsp/Xsp.c:23:12: note: 'XSPCloseDisplay' declared here 23 | static int XSPCloseDisplay(); | ^~~~~~~~~~~~~~~ In file included from ../Xsp/Xsp.c:6: ../Xsp/Xsp.c:49:37: error: conflicting types for 'XSPCloseDisplay'; have 'int(Display *, XExtCodes *)' 49 | static XEXT_GENERATE_CLOSE_DISPLAY (XSPCloseDisplay, xsp_info) | ^~~~~~~~~~~~~~~ ../Xsp/Xsp.c:36:9: error: 'XSPCloseDisplay' undeclared here (not in a function); did you mean 'XCloseDisplay'? 36 | XSPCloseDisplay, /* close_display */ | ^~~~~~~~~~~~~~~ | XCloseDisplay Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libxmp: add recipeMarkus Volk2025-04-221-0/+11
| | | | | | | libxmp is a requirement for libsdl2-mixer Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libvpx: upgrade 1.15.0 -> 1.15.1Wang Mingyu2025-04-161-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpv: build libmpv by defaultMarkus Volk2025-03-311-0/+1
| | | | | | | | Add libmpv to PACKAGECONFIG. It is the default setting for mpv_0.40.0 and will be a requirement for recipes like mpvpaper or celluloid Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpv: remove unused patchMarkus Volk2025-03-311-87/+0
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpv: update 0.39 -> 0.40Markus Volk2025-03-281-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - license files have been updated without change - add dependency on 'libdisplay-info' Release 0.40.0 ============== We are excited to announce the release of mpv 0.40.0. Key highlights: * Console: Enhanced autocompletion and visual styling * OSC: New selection menu accessible by right-clicking common buttons * HDR is now natively supported when using direct rendering (DRM), as well as dmabuf-wayland on Linux * Native clipboard access for scripts via new `clipboard` property * New command menu, with common actions easily accessible * Enhanced select.lua with new selection options for watch history, editions, DVD/Blu-Ray titles * New positioning.lua script script for cursor-centric zooming and drag to pan * Better stream support for Blu-ray, DVD and CDDA * Track selection improvements and better metadata display * Added osd-box / sub-box / box profiles to easily enable box styled OSD/OSC * Windows support in umpv helper script This release requires FFmpeg 6.1 or newer and libplacebo 6.338.2 or newer. - vf_d3d11vpp: add NVIDIA RTX Video HDR support - context_drm_gl: add support for HDR metadata - positioning.lua: add new script for video alignment and zooming - umpv: add Windows support - command: add clipboard property with native backends for Windows, macOS, and Wayland - select.lua: add watch history, edition, DVD/Blu-Ray titles and more selection options - input.conf: add cursor-centric zoom and drag-to-pan bindings - wayland: add support for wp-color-management-v1 protocol - console.lua: add persistent command history - stats.lua: add timecode display - options: add --playlist-exts and --archive-exts - wayland_common: support IME usage via text-input-v3 - command: add multiple track metadata and properties - vo_gpu_next: add chroma location and HDR metadata to shader parameters - player/screenshot: support more formats for screenshot-raw command - demux_mkv: add `--demuxer-mkv-crop-compat` option - misc/language: parse hi/sdh/cc tags from external subtitle tracks - wayland: support xdg-activation - player: add mpv:// protocol - meson: build libmpv by default - command: enhance track and playlist display information - input.conf: improve numpad key bindings - osc.lua: add custom buttons support and improved mouse bindings - console.lua: inherit OSD styles and colors - options: default to --prefetch-playlist=yes - osc.lua: add slimbottombar and slimtopbar layouts - command: improve frame-step to go through multiple frames - wayland: use wp-presentation v2 if available - various: reorganize options into more logical groups - vo_gpu_next: improve target colorspace handling - options: disable `--input-ime` by default (enabled on demand) - sd_ass: introduce sub-ass-prune-delay - player: add an optional mute flag when framestepping - command: add clipboard/text-primary property - command: add current-clipboard-backend property - command: add notify-property command - options: add --script-opt alias for --script-opts-append - options: add --osd-bar-marker-{size,style} options - options: add --input-ime for improved text input - options: add --video-recenter - options: add --clipboard-backends - options: add --wayland-internal-vsync - options: add --sub-scale-signs - options: rename --load-osd-console to --load-console - player: improve track selection for multi-component languages - options: improve frame-step command to handle multiple frames - input.conf: make Alt+BS reset --video-align-{x,y} - command: print track metadata when changing track - command: print track-list with enhanced metadata - options: deprecate `--gamma-auto` (use gamma-auto.lua script instead) - options: deprecate undocumented --cdda-span-{a,b} options - f_hwtransfer: ensure that we convert to full range rgb with scale_vaapi - win32: fix window size restore after maximize state - build: fix dynamic generation of mpv.desktop file protocols - player/sub: avoid pointlessly redecoding subs - x11: remove nvidia blacklist logic from --x11-present=auto - osc.lua: seek to the nearest chapter when right clicking the seekbar - command: fix keybind command with sequence keys - video/out/wayland_common: fix crash with multi-seat drag and drop - demux: reclaim demux_packets to reduce memory allocator pressure - demux_cue: only accept TRACK with AUDIO type - player/loadfile: strip common filename part from external track title - build: remove unused dvdread dependency - wayland: fix vertical resizing and scaling issues - console.lua: improve completion and visual appearance - sub/osd: default to a semitransparent black back color - player: improve playlist handling with prefetch - drm: parse EDID using libdisplay-info (which is now a required dependency) - win32: fix window size restore after maximize state - hwdec_d3d11va: align image mapper dimensions to a multiple of 2 - wayland: fix DnD with focus follow mouse - player: store external filenames as normalized - player: properly handle secondary subtitles on the terminal - demux_mkv: add support for chroma location - vo_dmabuf_wayland: improve and fix format selection - player: fix combination of --loop-playlist + --shuffle + --prefetch-playlist Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jack: apply some improvementsThomas Perrot2025-03-271-11/+3
| | | | | | | | | | | | - Remove the do_install append because jack_control no longer builds when the dbus pkgconfig is disabled. - Add python3-core to the runtime dependencies when D-Bus is enabled, because jack_control requires /usr/bin/python3. - Use PACKAGE_BEFORE_PN to enable additional packages. - Remove the HTML documentation because it no longer builds. Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmad: patch CVE-2017-8372 and CVE-2017-8373Peter Marko2025-03-202-0/+831
| | | | | | | | | | Pick patch [1] from Debian based on [2]. [1] https://salsa.debian.org/multimedia-team/libmad/-/raw/debian/0.15.1b-11/debian/patches/length-check.patch?ref_type=tags [2] https://security-tracker.debian.org/tracker/CVE-2017-8374 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmad: patch CVE-2017-8372 and CVE-2017-8373Peter Marko2025-03-202-0/+70
| | | | | | | | | | | Pick patch [1] from Debian based on [2] and [3]. [1] https://salsa.debian.org/multimedia-team/libmad/-/blob/debian/0.15.1b-11/debian/patches/md_size.diff?ref_type=tags [2] https://security-tracker.debian.org/tracker/CVE-2017-8372 [3] https://security-tracker.debian.org/tracker/CVE-2017-8373 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmad: ignore CVE-2017-11552 and CVE-2018-7263Peter Marko2025-03-201-0/+3
| | | | | | | | | | These CVEs are for mpg321, not libmad. See Debian assessment: * https://security-tracker.debian.org/tracker/CVE-2017-11552 * https://security-tracker.debian.org/tracker/CVE-2018-7263 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmad: extend CVE_PRODUCTPeter Marko2025-03-201-0/+2
| | | | | | | | | | | Catch more CVEs by adding additional product per sqlite> select vendor, product, count(*) from products where product like '%libmad%' group by vendor, product; underbit|libmad|1 underbit|mad_libmad|4 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Fix variable assignment whitespaceRichard Purdie2025-03-204-4/+4
| | | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* faad2: upgrade 2.11.1 -> 2.11.2Wang Mingyu2025-03-111-1/+1
| | | | | | | | | | | | | Changelog: ============ * Add option BUILD_FAAD_CLI * Add conditional build with DRC * Use adts_frame for adts header detection * Fix gapless calculation in frontend * Fix write_audio_* function heap buffer overflow Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplacebo: fix demos PACKAGECONFIGGyorgy Sarvari2025-02-162-1/+42
| | | | | | | | | | | | | | | | | | In case the demos PACKAGECONFIG is enabled, linking fails with the following error: | /usr/src/debug/libplacebo/7.349.0/demos/plplay.c:669:(.text.startup+0x90): undefined reference to `parse_args' | collect2: error: ld returned 1 exit status The implementation of the missing function is guarded erroneously by an ifdef flag (HAVE_NUKLEAR, which is only true in case headers from the nuklear library are present - but in this recipe they are not included). This patch moves the implementation of this function outside of the ifdef to avoid the build failure. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplacebo: fix glslang PACKAGECONFIGGyorgy Sarvari2025-02-162-1/+43
| | | | | | | | | | | | | | | | | | | | In case glslang PACKAGECONFIG is enabled, compilation fails with a lot of errors about undefined references from the glslang namespace, e.g. | /usr/src/debug/libplacebo/7.349.0/src/glsl/glslang.cc:79:(.text+0x160): undefined reference to `glslang::TShader::TShader(EShLanguage)' This has been solved in the upstream project, and this change backports the commit that fixes the meson.build file to find the correct libraries during compilation. Additionally, fix also the TMPDIR QA error that popped up after fixing the above issue: remove the RECIPE_SYSROOT value from the generated pkgconf file (and instead of referring to the libraries by absolute path, just refer to them by name, as they are supposed to be present in the standard library lookup path). Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: mark CVE-2020-18781 as patchedPeter Marko2025-01-171-0/+1
| | | | | | | | | | | | | | | | | | | | | | Per [1] this CVE is already patched by commit [2]. This can be also verified with yocto build. Running without this patch: root@qemux86-64:~# sfconvert poc.wav output format wave malloc(): corrupted top size Aborted Running with it: root@qemux86-64:~# sfconvert poc.wav output format wave Audio File Library: Bad number of coefficients [error 62] Could not open file 'poc.wav' for reading. [1] https://github.com/mpruett/audiofile/issues/56 [2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: patch CVE-2017-6839Peter Marko2024-12-272-0/+127
| | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/844a7c6281eb442881330a5d36d5a0719f2870bf Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: patch CVE-2017-6831Peter Marko2024-12-272-0/+47
| | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/bd5f84d301c4e74ca200a9336eca88468ec0e1f3 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: fix multiple CVEsPeter Marko2024-12-272-0/+80
| | | | | | | | | | CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838 Use patch from buildroot: https://github.com/buildroot/buildroot/commit/4a1a8277bba490d227f413e218138e39f1fe1203 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: patch CVE-2017-6829Peter Marko2024-12-272-0/+44
| | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/434890df2a7c131b40fec1c49e6239972ab299d2 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audiofile: fix multiple CVEsPeter Marko2024-12-272-0/+46
| | | | | | | | | | CVE-2017-6827 / CVE-2017-6828 / CVE-2017-6832 / CVE-2017-6833 / CVE-2017-6835 / CVE-2017-6837 Use patch from buildroot: https://github.com/buildroot/buildroot/commit/cc00bde57fc20d11f8fa4e8ec5f193c091714c55 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* id3lib: mark CVE-2007-4460 as fixedPeter Marko2024-12-271-0/+2
| | | | | | | | | | | | | | This is fixed in id3lib3.8.3_3.8.3-16.2.debian.tar.xz patch included in SRC_URI. Version 3.8.3-7 contains patch for this CVE, we use 3.8.3-16.2. This can be verified by checking the debian/changelog within this patch or diffing [1] and [2] and verifying that this can be reverse-applied. [1] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-6.diff.gz [2] https://snapshot.debian.org/archive/debian/20070819T000000Z/pool/main/i/id3lib3.8.3/id3lib3.8.3_3.8.3-7.diff.gz Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-18 21:29:05 +0000