<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-multimedia/libsndfile/libsndfile1, branch master</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=master</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2025-11-07T13:31:53+00:00</updated>
<entry>
<title>The poky repository master branch is no longer being updated.</title>
<updated>2025-11-07T13:31:53+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2025-11-07T13:31:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8c22ff0d8b70d9b12f0487ef696a7e915b9e3173'/>
<id>urn:sha1:8c22ff0d8b70d9b12f0487ef696a7e915b9e3173</id>
<content type='text'>
You can either:

a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs

b) use the new bitbake-setup

You can find information about either approach in our documentation:
https://docs.yoctoproject.org/

Note that "poky" the distro setting is still available in meta-yocto as
before and we continue to use and maintain that.

Long live Poky!

Some further information on the background of this change can be found
in: https://lists.openembedded.org/g/openembedded-architecture/message/2179

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: Include &lt;stdbool.h&gt; instead of redefining bool true and false</title>
<updated>2025-03-19T12:09:06+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2025-03-19T08:15:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=05a300261e177e50b81bd72fa84767b766be34c8'/>
<id>urn:sha1:05a300261e177e50b81bd72fa84767b766be34c8</id>
<content type='text'>
(From OE-Core rev: 198323f4381cc40d219185e86800872df5f9d789)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: backport the fix for CVE-2024-50612</title>
<updated>2024-11-19T12:54:32+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2024-11-18T11:34:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=293b879bd40ca794e5d95439d99cf6f61ae69e4c'/>
<id>urn:sha1:293b879bd40ca794e5d95439d99cf6f61ae69e4c</id>
<content type='text'>
Backport the fix from upstream.

(From OE-Core rev: 2fc6b711a6a7252ddf13587927c06333f5a38d71)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Mathieu Dubois-Briand &lt;mathieu.dubois-briand@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: fix CVE-2022-33065</title>
<updated>2023-10-23T09:49:19+00:00</updated>
<author>
<name>Alex Stewart</name>
<email>alex.stewart@ni.com</email>
</author>
<published>2023-10-20T17:19:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=7d6578578f6d7472080f1a225542903ca11e964d'/>
<id>urn:sha1:7d6578578f6d7472080f1a225542903ca11e964d</id>
<content type='text'>
(From OE-Core rev: f34991c7eeb91702a44ac8b4a190fcb45dac57cb)

Signed-off-by: Alex Stewart &lt;alex.stewart@ni.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: update 1.0.31 -&gt; 1.1.0</title>
<updated>2022-04-19T13:14:10+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2022-04-07T17:00:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2921dfb021d98d37f8172fcec3a92255bc00452d'/>
<id>urn:sha1:2921dfb021d98d37f8172fcec3a92255bc00452d</id>
<content type='text'>
(From OE-Core rev: 808d63cf8a2cc4ee7ce22eb0ac18beab01885a04)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile: Fix missing external library support</title>
<updated>2022-03-04T17:14:15+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-03-03T11:16:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=3196d85a509bb242f2561b9860926c60d04692af'/>
<id>urn:sha1:3196d85a509bb242f2561b9860926c60d04692af</id>
<content type='text'>
The recent upgrade regressed codec support since opus is missing and
this caused several codecs to be disabled. Add a patch to work around
the issue whilst it is discussed with upstream.

(From OE-Core rev: d1aba25b2559041c96735b58424baf8862796095)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: bump to version 1.0.31</title>
<updated>2022-02-25T12:41:24+00:00</updated>
<author>
<name>Alexandru Ardelean</name>
<email>ardeleanalex@gmail.com</email>
</author>
<published>2022-02-24T15:30:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fd2c86b06963345683ac5dc4f47f9da8e0c8c69d'/>
<id>urn:sha1:fd2c86b06963345683ac5dc4f47f9da8e0c8c69d</id>
<content type='text'>
It seems that the homepage has moved (for a while now) from
  http://www.mega-nerd.com/libsndfile/
to
  https://libsndfile.github.io/libsndfile/

On Github, the development group seems to include Erik de Castro Lopo (the
original author of libsndfile1).
Link: https://github.com/orgs/libsndfile/people

All backported CVE patches are in version 1.0.31 (I've checked).

The supported format page [1], mentions that Ogg/Opus is supported since
1.0.29, however that isn't currently added in this patch. And it may
require libopus.
And mp3 is supported at around version 1.1.0, but that version is in beta.

This change focuses solely on updating to 1.0.31 and removing all
backported patches.

[1] https://libsndfile.github.io/libsndfile/formats.html

(From OE-Core rev: 6e12ee5f7871150c11dac754145d146ed364b506)

Signed-off-by: Alexandru Ardelean &lt;ardeleanalex@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: fix CVE-2019-3832</title>
<updated>2019-03-26T14:02:09+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2019-03-25T23:21:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=49d6cd5000e2ff77b48b930fbceaa5938095e96d'/>
<id>urn:sha1:49d6cd5000e2ff77b48b930fbceaa5938095e96d</id>
<content type='text'>
The previous fix for CVE-2018-19758 wasn't complete, so backport another patch
to solve it properly.

(From OE-Core rev: aeaca9bb1b1c8bf44818945dc4b2cbd6d4b5cef2)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: update security patches</title>
<updated>2019-03-06T10:39:25+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2019-03-05T16:29:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=1cbf28ba2c17f32a63da5f0545994e477c1e8c5a'/>
<id>urn:sha1:1cbf28ba2c17f32a63da5f0545994e477c1e8c5a</id>
<content type='text'>
Remove CVE-2017-14245-14246.patch, fix rejected upstream as it doesn't solve the
underlying issue.

Instead 0001-a-ulaw-fix-multiple-buffer-overflows-432 also solves CVE-2017-14245
and CVE-2017-14246 properly.

Add patches for CVE-2017-12562 and CVE-2018-19758.

Refresh CVE-2018-13139.patch.

(From OE-Core rev: a5625df8031985e9c60c34068a4a01c36da40eec)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libsndfile1: Security fix CVE-2018-19432</title>
<updated>2019-02-25T16:35:33+00:00</updated>
<author>
<name>Changqing Li</name>
<email>changqing.li@windriver.com</email>
</author>
<published>2019-02-20T08:54:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ae9160e099e9b23f1b756020d78db46052a1dca6'/>
<id>urn:sha1:ae9160e099e9b23f1b756020d78db46052a1dca6</id>
<content type='text'>
(From OE-Core rev: 6f010c9b7777aae5ce2108122d0c6d3b1d630a21)

Signed-off-by: Changqing Li &lt;changqing.li@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
