linux/poky.git/meta/recipes-multimedia/libvorbis, branch uninative-2.6

libvorbis: 3 CVE fixes

2018-08-16T21:40:28+00:00

CVE-2017-14160, CVE-2018-10393 (same as 14160), and CVE-2018-10392. These fixes should be in libvorbis 1.3.7. (From OE-Core rev: 45ff20f325a51fe0ed12d58160c08e04781ce341) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie

libvorbis: 1.3.5 -> 1.3.6

2018-05-29T20:07:15+00:00

Rebased 0001-configure-Check-for-clang.patch. Removed the backported CVE patches. License-Update: copyright years refreshed (From OE-Core rev: d536c0a0e400c27fd7954402195698e2c639338a) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2018-5146

2018-03-25T08:40:42+00:00

Prevent out-of-bounds write in codebook decoding. The bug could allow code execution from a specially crafted Ogg Vorbis file. References: https://www.debian.org/security/2018/dsa-4140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146 (From OE-Core rev: 1f01ce76c76d63f5ffe96baf518e670ae01c4d12) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2017-14632

2018-03-25T08:40:42+00:00

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632 (From OE-Core rev: 5786e39e040f241f6bade29ba2ce61b7715e1b66) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: CVE-2017-14633

2018-03-25T08:40:41+00:00

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633 (From OE-Core rev: db6c0df30acdb9973f9bd4297a5fce4725c0720d) Signed-off-by: Tanu Kaskinen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: Contain gcc specific compiler flags using configure option

2017-03-24T23:43:32+00:00

(From OE-Core rev: b6cdbf50e5c26c406e4ddecd66202ff7324f5468) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: remove legacy options

2015-09-03T11:43:20+00:00

Those code fragments date back to ancient times. EXTRA_OECONF is not required anymore and we should give gcc another try to do it right. Testing on cortex-a8 with thumb and -O2 reveals a performance boost of 82 percent during encoding in comparison to -O0. -O4 gives another 7 percent. (From OE-Core rev: ea04f05710a9a2a1e9561fe87579d0ae9690bd21) Signed-off-by: Stefan Müller-Klieser Signed-off-by: Richard Purdie

libvorbis: Update libvorbis_1.3.4.bb -> libvorbis_1.3.5.bb

2015-08-30T11:35:53+00:00

Licence years have changes causing checksum changes -Copyright (c) 2002-2008 Xiph.org Foundation +Copyright (c) 2002-2015 Xiph.org Foundation (From OE-Core rev: cb034175054ae31f7065677ba36b6a45dc067be0) (From OE-Core rev: 49e5f3fca65133a83f124324011d7bee18fd3aa1) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libvorbis: upgrade to 1.3.4

2014-02-20T14:28:11+00:00

- Updated website; - Cleaned up bugtracker web address; - Removed PR; - Switched to ${BP} variable; - removed obsolete_automake_macros.patch, included in upstream; (From OE-Core rev: 8d0f6b39839d14dea5ed5cb8888466ed76afee00) Signed-off-by: Cristian Iorga Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

libvorbis: replace obsolete automake macros with working ones

2013-01-15T08:10:12+00:00

Add obsolete_automake_macros.patch that replaces automake macros no longer supported by automake-1.13 with modern constructs. (From OE-Core rev: 0f2a601b04ac564905942b4d2006dbf348b1517b) Signed-off-by: Marko Lindqvist Signed-off-by: Saul Wold Signed-off-by: Richard Purdie