linux/poky.git/meta/recipes-multimedia/libvorbis, branch 4.2_M1

meta: fix some unresponsive homepages and bugtracker links

2020-10-30T13:22:48+00:00

remove some extra whitespaces (From OE-Core rev: 32ce3716761165b9df12306249418645724122cc) Signed-off-by: Maxime Roussin-Bélanger Signed-off-by: Richard Purdie

libvorbis: upgrade 1.3.6 -> 1.3.7

2020-07-12T11:21:47+00:00

CVE-2017-14160.patch CVE-2018-10392.patch removed since they are included in 1.3.7 -License-Update: Copyright year updated to 2020. license text: URL of Xiph.Org Foundation changed to https://xiph.org/ (From OE-Core rev: 75f97f7f8a9a8b4c029f9fbfe1d1c3a43f6ebb4b) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

libvorbis: Clarify BSD license variant

2019-10-15T13:16:11+00:00

The license of libvorbis is BSD-3-Clause. (From OE-Core rev: 27a73929ee51bc7d78cc29ff800a7537f8718c54) Signed-off-by: Christophe Priouzeau Signed-off-by: Richard Purdie

libvorbis: 3 CVE fixes

2018-08-16T21:40:28+00:00

CVE-2017-14160, CVE-2018-10393 (same as 14160), and CVE-2018-10392. These fixes should be in libvorbis 1.3.7. (From OE-Core rev: 45ff20f325a51fe0ed12d58160c08e04781ce341) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie

libvorbis: 1.3.5 -> 1.3.6

2018-05-29T20:07:15+00:00

Rebased 0001-configure-Check-for-clang.patch. Removed the backported CVE patches. License-Update: copyright years refreshed (From OE-Core rev: d536c0a0e400c27fd7954402195698e2c639338a) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2018-5146

2018-03-25T08:40:42+00:00

Prevent out-of-bounds write in codebook decoding. The bug could allow code execution from a specially crafted Ogg Vorbis file. References: https://www.debian.org/security/2018/dsa-4140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146 (From OE-Core rev: 1f01ce76c76d63f5ffe96baf518e670ae01c4d12) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2017-14632

2018-03-25T08:40:42+00:00

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632 (From OE-Core rev: 5786e39e040f241f6bade29ba2ce61b7715e1b66) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2017-14633

2018-03-25T08:40:41+00:00

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633 (From OE-Core rev: db6c0df30acdb9973f9bd4297a5fce4725c0720d) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: Contain gcc specific compiler flags using configure option

2017-03-24T23:43:32+00:00

(From OE-Core rev: b6cdbf50e5c26c406e4ddecd66202ff7324f5468) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: remove legacy options

2015-09-03T11:43:20+00:00

Those code fragments date back to ancient times. EXTRA_OECONF is not required anymore and we should give gcc another try to do it right. Testing on cortex-a8 with thumb and -O2 reveals a performance boost of 82 percent during encoding in comparison to -O0. -O4 gives another 7 percent. (From OE-Core rev: ea04f05710a9a2a1e9561fe87579d0ae9690bd21) Signed-off-by: Stefan Müller-Klieser Signed-off-by: Richard Purdie