<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-multimedia/lame/lame_3.99.5.bb, branch nanbield</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=nanbield</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=nanbield'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2017-12-10T22:45:18+00:00</updated>
<entry>
<title>lame: 3.99.5 -&gt; 3.100</title>
<updated>2017-12-10T22:45:18+00:00</updated>
<author>
<name>Tanu Kaskinen</name>
<email>tanuk@iki.fi</email>
</author>
<published>2017-11-27T16:39:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e310fbff97490615f8ab46dd8029092abe461616'/>
<id>urn:sha1:e310fbff97490615f8ab46dd8029092abe461616</id>
<content type='text'>
Release notes:
http://lame.cvs.sourceforge.net/viewvc/lame/lame/doc/html/history.html?revision=1.154

Dropped patches that are included in the release:
 - lame-3.99.5_fix_for_automake-1.12.x.patch
 - CVE-2017-13712.patch

The CACHED_CONFIGUREVARS thing to disable SSE code on x86 isn't needed
anymore. The build system now correctly detects when SSE isn't
available.

Note for stable branch maintainers: This release includes several fixes
for bugs that have a CVE number associated with them. The bugs (or at
least most of them) are crashes that seem to be considered "remote DoS"
vulnerabilities, probably because it's easy to imagine lame being used
with untrusted audio files from remote sources. If you want to backport
"all sercurity fixes" to the stable brances, that task seems pretty
difficult. The release notes explicitly mention three CVE numbers, but
there are more: for example, OE had a fix for CVE-2017-13712, which is
not mentioned in the release notes but is fixed in the release. The
commit log doesn't keep any track of CVE numbers either. Maybe it would
be best to just upgrade lame to 3.100 also in the stable branches.

(From OE-Core rev: 930f8873e0e180da7242f65bfd5c60f9d6c19424)

Signed-off-by: Tanu Kaskinen &lt;tanuk@iki.fi&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: fix CVE-2017-13712</title>
<updated>2017-09-25T13:14:17+00:00</updated>
<author>
<name>Kai Kang</name>
<email>kai.kang@windriver.com</email>
</author>
<published>2017-09-22T06:27:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fd994b5bede3724ce23f3766e6109d83e534d3f3'/>
<id>urn:sha1:fd994b5bede3724ce23f3766e6109d83e534d3f3</id>
<content type='text'>
Backport patch to fix CVE-2017-13712 for lame.

(From OE-Core rev: 3e80f86b4227f1d6ddd604a0738449d93f01c03f)

Signed-off-by: Kai Kang &lt;kai.kang@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: use x86 over-ride instead of i586</title>
<updated>2015-06-08T16:34:06+00:00</updated>
<author>
<name>Andre McCurdy</name>
<email>armccurdy@gmail.com</email>
</author>
<published>2015-06-04T19:24:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c116da80b5803552a91c0acad8eedeb4838fcc0a'/>
<id>urn:sha1:c116da80b5803552a91c0acad8eedeb4838fcc0a</id>
<content type='text'>
Support i686 without needing to duplicate the i586 over-ride.

(From OE-Core rev: 70dc96627d9a812e8f28a8b660b13f955bb4f374)

Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: Add missing DEPENDS on gettext-native</title>
<updated>2014-06-03T15:49:19+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2014-06-02T20:05:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c1de48a44752917ebd73ded454a61472bb869903'/>
<id>urn:sha1:c1de48a44752917ebd73ded454a61472bb869903</id>
<content type='text'>
Without this, configure will fail due to a missing AM_ICONV macro.

(From OE-Core rev: 36ace50aea4e47a0ddf9365a6dec1e0db0b31107)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>recipes: Add missing pkgconfig class inherits</title>
<updated>2014-06-03T15:49:19+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2014-06-02T20:04:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e5cf31cf9387fe6d7fef84c67bb78e5c814b06d5'/>
<id>urn:sha1:e5cf31cf9387fe6d7fef84c67bb78e5c814b06d5</id>
<content type='text'>
These recipes all use pkg-config in some way but were missing
dependencies on the tool, this patch adds them.

(From OE-Core rev: 2543b14dd0ca13005be0df027543431fc8e882ae)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>gstreamer/lame: Better gcc 4.9 fix</title>
<updated>2014-05-15T22:27:45+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2014-05-12T17:00:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=874d81a5ebb6395b0d65d0082471287e522d0c47'/>
<id>urn:sha1:874d81a5ebb6395b0d65d0082471287e522d0c47</id>
<content type='text'>
gstreamer/lame does runtime detection to enable/disable things like SSE code.
Unfortunately it is broken and will try and use this even with i586
compiler flags. This change forces it back to the approach with gcc 4.8
by disabling the problematic headers.

Its suboptimal but less so that the proposed previous forced enabling of
SSE on x86 everywhere.

(From OE-Core rev: e273301efa0037a13c3a60b4414140364d9c9873)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: update HOMEPAGE</title>
<updated>2014-01-02T12:50:19+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2013-12-21T23:32:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d6a19b06057fdcb3ef3362e7801bd7327145fbc6'/>
<id>urn:sha1:d6a19b06057fdcb3ef3362e7801bd7327145fbc6</id>
<content type='text'>
(From OE-Core rev: 4af2f72f657dae94f65a60441aca76c19b0f7361)

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Replace one-line DESCRIPTION with SUMMARY</title>
<updated>2014-01-02T12:50:18+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2013-12-19T15:13:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cec8b230cf2b459dc47deeaa201dd13055b5fb9a'/>
<id>urn:sha1:cec8b230cf2b459dc47deeaa201dd13055b5fb9a</id>
<content type='text'>
A lot of our recipes had short one-line DESCRIPTION values and no
SUMMARY value set. In this case it's much better to just set SUMMARY
since DESCRIPTION is defaulted from SUMMARY anyway and then the SUMMARY
is at least useful. I also took the opportunity to fix up a lot of the
new SUMMARY values, making them concisely explain the function of the
recipe / package where possible.

(From OE-Core rev: b8feee3cf21f70ba4ec3b822d2f596d4fc02a292)

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: Add dependency on ncurses</title>
<updated>2013-10-07T08:37:33+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2013-10-05T12:23:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b77cb9b719a399d81d60d49f5498cbe14976bc58'/>
<id>urn:sha1:b77cb9b719a399d81d60d49f5498cbe14976bc58</id>
<content type='text'>
* it's autodetected and configure doesn't allow to explicitly disable it

(From OE-Core rev: 983446c4f4274b9fd482b2d6b711428f4483c02f)

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lame: fix build with automake 1.12.x</title>
<updated>2012-07-17T09:54:06+00:00</updated>
<author>
<name>Nitin A Kamble</name>
<email>nitin.a.kamble@intel.com</email>
</author>
<published>2012-07-13T06:37:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cac24abd04c9b3e84b1be354a4ca710b649eb940'/>
<id>urn:sha1:cac24abd04c9b3e84b1be354a4ca710b649eb940</id>
<content type='text'>
automake 1.12.x has deprecated automatic de-ANSI-fication support.
Fix sources to work with automake 1.12.x

Added a new patch:
   lame-3.99.5_fix_for_automake-1.12.x.patch

(From OE-Core rev: 84a433e383e7b2e96932739c31b25956ad8dfc54)

Signed-off-by: Nitin A Kamble &lt;nitin.a.kamble@intel.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
