linux/poky.git/meta/recipes-multimedia/libsndfile, branch pyro-next

libsndfile1: Fix CVE-2017-8363

2017-09-11T21:15:58+00:00

Backport the patch to fix CVE-2017-8363: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8363 (From OE-Core rev: 9cc9956c5ed09f9016cb23bd763652e5ab55f3cd) (From OE-Core rev: 201fa8f6a10469886db6d48c3a3e91712382e561) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libsndfile1: Fix CVE-2017-8362

2017-09-11T21:15:58+00:00

Backport the patch to fix CVE-2017-8362: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8362 (From OE-Core rev: 0c8da3f6f85962196f2ad54fffd839239f5c2274) (From OE-Core rev: eec5e5ce04cfbd1e41e54be31afee72ecc9ec5dd) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie with minor changes Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libsndfile1: Fix CVE-2017-8361 and CVE-2017-8365

2017-09-11T21:15:58+00:00

Backport the patch to fix two CVEs: CVE-2017-8361: The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. CVE-2017-8365: The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-8361 https://nvd.nist.gov/vuln/detail/CVE-2017-8365 (From OE-Core rev: d92877ade8fd4dd9b548c6b664bf4357a1f9428a) (From OE-Core rev: a23241c1e10c706754c19d7f69fe7c6cbac3732e) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libsndfile1: Fix CVE-2017-6892

2017-09-11T21:15:58+00:00

Backport upstream patch to fix CVE-2017-6892. CVE: CVE-2017-6892 (From OE-Core rev: cc9b8d0afe64b83f585843f3aff1c077f69fd656) (From OE-Core rev: eed7d052dc053732e2d485dcc7e551b6754c4576) Signed-off-by: Fan Xin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libsndfile1_1.0.28.bb: set CVE_PRODUCT to libsndfile

2017-08-29T10:57:27+00:00

It is used in NVD to CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2017-6892 (From OE-Core rev: 0ee67de1028ea3275b6dfe398235e71c4bdbb704) Signed-off-by: Mikko Rapeli Signed-off-by: Ross Burton (cherry picked from commit adfb1c7fe28a6ef2bcf698f7415fd86b01bdc489) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

recipes: Make use of the new bb.utils.filter() function

2017-03-01T11:17:45+00:00

(From OE-Core rev: 0a1427bf9aeeda6bee2cc0af8da4ea5fd90aef6f) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libsndfile1: 1.0.26 -> 1.0.27

2016-07-26T07:56:27+00:00

(From OE-Core rev: e5128874a93519ff5ef8a66dbccd4d89feaba32b) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

meta: remove redundant ac_cv_sizeof_off_t assignments

2016-04-12T21:50:21+00:00

ac_cv_sizeof_off_t was previously in the site cache files, which was breaking large file support and required a workaround in each recipe that actually wanted to use large files. Now that the entry has been removed from the site cache, we can remove the workarounds. (From OE-Core rev: 1485d7cae88adb3575c6eaa47784fe50820d2740) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libsndfile1: enable FLAC/Ogg/Vorbis support

2015-12-28T09:25:17+00:00

This makes it possible to handle FLAC and Vorbis files in programs that use libsndfile. It seems that the external dependencies were disabled just as a routine measure to make builds deterministic, since the dependencies were missing from DEPENDS[1]. Therefore it seems likely that nobody particularly wants to have libsndfile without support for these formats. [1] http://git.openembedded.org/openembedded-core/commit/?id=34a14ce3ea78be299175e1a803f92519aa02355b (From OE-Core rev: 7c7d436e660a8869179c4e5579aa2a992d636c22) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libsndfile1: 1.0.25 -> 1.0.26

2015-12-16T12:12:15+00:00

Main points from the release announcement: * Fix for CVE-2014-9496, SD2 buffer read overflow. * Fix for CVE-2014-9756, file_io.c divide by zero. * Fix for CVE-2015-7805, AIFF heap write overflow. * Add support for ALAC encoder in a CAF container. * Add support for Cart chunks in WAV files. * Minor bug fixes and improvements. All patches we had are included in the new release. Dropped PR from the recipe. (From OE-Core rev: 5a4b8f7f643a4b95a7036eab02c7f74aa4077982) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie