linux/poky.git/meta/recipes-multimedia, branch langdale

tiff: Fix CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799

2023-03-25T23:00:14+00:00

import patch from ubuntu to fix multiple CVEs http://archive.ubuntu.com/ubuntu/pool/main/t/tiff/tiff_4.4.0-4ubuntu3.3.debian.tar.xz (From OE-Core rev: 7634c800819f23f0cb1676bf46efca19e9176df1) Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ffmpeg: fix build failure when vulkan is enabled

2023-03-14T17:47:40+00:00

The patch fixes the following errors observed when building ffmpeg in vulkan-enabled distros: | src/libavutil/hwcontext_vulkan.c:363:7: error: 'VK_EXT_VIDEO_DECODE_H264_EXTENSION_NAME' undeclared here (not in a function); did you mean 'VK_EXT_VIDEO_ENCODE_H264_EXTENSION_NAME'? | 363 | { VK_EXT_VIDEO_DECODE_H264_EXTENSION_NAME, FF_VK_EXT_NO_FLAG }, | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | | VK_EXT_VIDEO_ENCODE_H264_EXTENSION_NAME | src/libavutil/hwcontext_vulkan.c:364:7: error: 'VK_EXT_VIDEO_DECODE_H265_EXTENSION_NAME' undeclared here (not in a function); did you mean 'VK_EXT_VIDEO_ENCODE_H265_EXTENSION_NAME'? | 364 | { VK_EXT_VIDEO_DECODE_H265_EXTENSION_NAME, FF_VK_EXT_NO_FLAG }, | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | | VK_EXT_VIDEO_ENCODE_H265_EXTENSION_NAME (From OE-Core rev: 9389031c7bae92565cc4a29af7f58dc49c3f9762) Signed-off-by: Dmitry Baryshkov Signed-off-by: Richard Purdie (cherry picked from commit b16c8696be9d56edb5ff77210abfff9a784fad89) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: fix multiple CVEs

2023-03-14T17:47:40+00:00

import patch from debian to fix CVE-2022-48281 http://security.debian.org/debian-security/pool/updates/main/t/tiff/tiff_4.2.0-1+deb11u4.debian.tar.xz import patch from fedora to fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 https://src.fedoraproject.org/rpms/libtiff/c/91856895aadf3cce6353f40c2feef9bf0b486440 (From OE-Core rev: d9ce9b37236f5c16ffba4572ad720aeb50edeee9) Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ffmpeg: fix configure failure on noexec /tmp host

2023-02-24T16:41:51+00:00

The configure scripts uses /tmp to execute some generated files. If /tmp is noexec, then we meet the following error. | Unable to create and execute files in /tmp. Set the TMPDIR environment | variable to another directory and make sure that it is not mounted noexec. | Sanity test failed. (From OE-Core rev: 20231fece4b7f15bae574d89a362506f39cfd967) Signed-off-by: Chen Qi Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 6099b88c4decb285fd3519d5565909c15d935030) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libpng: Enable NEON for aarch64 to enensure consistency with arm32.

2023-01-26T23:39:06+00:00

NEON is enabled for aarch64 by default, so, to ensure consistency with arm32, reference to libpng-1.6.38/configure, added enable_hardware_optimizations option for aarch64. (From OE-Core rev: 27a58c11536bc0e804904c2dd97820973d0b9a2f) Signed-off-by: Lei Maohui Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 12e68d5824849fa20f0e3fe8fc1921da111bb6fb) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Add packageconfig knob for webp

2023-01-26T23:39:06+00:00

tiff-native otherwise falsely detects webp if its installed on build host. This ensures deterministic behavior regardless of host. (From OE-Core rev: 02a77676bab5fe36f8209d9eedd38a384d6c0ab5) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 718c44f282310b2ca85877fed706460ccc1eebea) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gstreamer1.0: Fix race conditions in gstbin tests

2023-01-15T11:05:19+00:00

(From OE-Core rev: dab90e4b278f6b12a21348aecf3ad70a8b6b76f7) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie (cherry picked from commit b57df3fe9c1623ba2f5a9a0e11a85dcdc77e76a5) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

Revert "gstreamer1.0: disable flaky gstbin:test_watch_for_state_change test"

2023-01-15T11:05:19+00:00

This reverts commit 220a527d269f146bdabd66040b5bee7de9e3fd3f. - Drop this patch and use the upstream solution https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2643 (From OE-Core rev: 4576d4f014f7ac0831e37e760372e62d2e0ea17e) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie (cherry picked from commit 9660045d07a2b492ac48a1f1b08aa4288b45d64a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gstreamer1.0: upgrade 1.20.4 -> 1.20.5

2023-01-06T17:33:19+00:00

Changelog: =========== systemclock waiting fixes for certain 32-bit platforms/libcs alphacombine: robustness improvements for corner case scenarios avfvideosrc: Report latency when doing screen capture d3d11videosink: various thread-safety and stability fixes decklink: fix performance issue when HDMI signal has been lost for a long time flacparse: Fix handling of headers advertising 32 bits per sample mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl libc) opengl: fix automatic dispmanx detection for rpi4 and fix usage of eglCreate/DestroyImage opusdec: Various channel-related fixes textrender: event handling fixes, esp. for GAP event subparse: Fix non-closed tag handling videoscale: fix handling of unknown buffer metas videosink: reverse playback handling fixes qtmux: Prefill mode fixes, especially for raw audio multiudpsink: allow binding to IPv6 address rtspsrc: Fix usage of IPv6 connections in SETUP rtspsrc: Only EOS on timeout if all streams are timed out/EOS splitmuxsrc: fix playback stall if there are unlinked pads v4l2: Fix SIGSEGV on state change during format changes wavparse robustness fixes Fix static linking on macOS (opengl, vulkan) gstreamer-vaapi: fix headless build against mesa >= 22.3.0 GStreamer Editing Services library: Fix build with tools disabled webrtc example/demo fixes unit test fixes for aesdec and rtpjitterbuffer Cerbero: Fix ios cross-compile with cmake on M1; some recipe updates and other build fixes Binary packages: pkg-config file fixes for various recipes (ffmpeg, taglib, gstreamer) Binary packages: Enable high bitdepth support for libvpx (VP8/VP9 encoding/decoding) Binary packages: ship aes plugin Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements Performance improvements (From OE-Core rev: de5bc45e799fc8024fd7c9fa1e752799c2f6c172) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit fd8ab6052d88120c58cf84ad7d77d60c12ef3b8a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libpng: upgrade 1.6.38 -> 1.6.39

2023-01-06T17:33:19+00:00

Changelog: ========== * Changed the error handler of oversized chunks (i.e. larger than PNG_USER_CHUNK_MALLOC_MAX) from png_chunk_error to png_benign_error. * Fixed a buffer overflow error in contrib/tools/pngfix. * Fixed a memory leak (CVE-2019-6129) in contrib/tools/pngcp. * Disabled the ARM Neon optimizations by default in the CMake file, following the default behavior of the configure script. * Allowed configure.ac to work with the trunk version of autoconf. * Removed the support for "install" targets from the legacy makefiles; removed the obsolete makefile.cegcc. * Cleaned up the code and updated the internal documentation. (From OE-Core rev: 53f517d6dd71cf01c828c956b37456dedbd95809) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit 19799cb50a00561b318cba1c8c20737f20e4a47f) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie