linux/poky.git/meta/recipes-multimedia, branch 4.2_M1

tiff: Security fix for CVE-2022-3970

2022-11-27T23:54:51+00:00

This patch contains a fix for CVE-2022-3970 Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-3970 https://security-tracker.debian.org/tracker/CVE-2022-3970 Patch generated from : https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be (From OE-Core rev: 668ff495ac44e5b6d9e1af15d3861b5c2b4dfcd1) Signed-off-by: Zheng Qiu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ffmpeg: fix for CVE-2022-3965

2022-11-27T23:54:50+00:00

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-3965 Upstream Fix: https://github.com/FFmpeg/FFmpeg/commit/13c13109759090b7f7182480d075e13b36ed8edd (From OE-Core rev: b88c96fe8964614978aa25a65dd34fc3c05c664c) Signed-off-by: Narpat Mali Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ffmpeg: fix for CVE-2022-3964

2022-11-27T23:54:50+00:00

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-3964 Upstream Fix: https://github.com/FFmpeg/FFmpeg/commit/92f9b28ed84a77138105475beba16c146bdaf984 (From OE-Core rev: 4595f85e7ce867d68ca9d6a6e3ad2544565be3cc) Signed-off-by: Narpat Mali Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

flac: update 1.4.0 -> 1.4.2

2022-11-22T12:26:46+00:00

License-Update: removed file, URL fix Remove options no longer supported upstream. (From OE-Core rev: 1d458456a37451f553006e60d248bc330c79a0c8) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

gstreamer1.0: upgrade 1.20.3 -> 1.20.4

2022-11-08T22:47:17+00:00

(From OE-Core rev: 58e4825328dafd7f593d9eb42be5506408627a31) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

alsa-lib: upgrade 1.2.7.2 -> 1.2.8

2022-11-08T22:47:16+00:00

(From OE-Core rev: 0bd006eb7b4652d0287ecae8614cdeee00a5a7b6) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

mpg123: upgrade 1.30.2 -> 1.31.1

2022-11-08T22:47:16+00:00

(From OE-Core rev: 4203b5a31ae067d54980189570beb480dd33e94e) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

alsa-ucm-conf: upgrade 1.2.7.2 -> 1.2.8

2022-11-08T22:47:16+00:00

(From OE-Core rev: 457bef9c63ad732df20e08640c4cc87928058786) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

alsa-utils: upgrade 1.2.7 -> 1.2.8

2022-11-08T22:47:16+00:00

(From OE-Core rev: a9804ef66be623e71de28309b8d8711d84b283bb) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ffmpeg: upgrade 5.1.1 -> 5.1.2

2022-11-08T22:47:15+00:00

(From OE-Core rev: 32da2113e553a3f81f4dcc5834e3fe30f48e4709) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie