linux/poky.git/meta/recipes-multimedia, branch yocto-3.1.12

meta: Add explict branch to git SRC_URIs, handle github url changes

2021-11-11T10:54:32+00:00

This update was made with the convert-scruri.py script in scripts/contrib This script handles two emerging issues: 1. There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. 2. Github are dropping support for git:// protocol fetching, so remap github urls as needed. For more details see: https://github.blog/2021-09-01-improving-git-protocol-security-github/ (From OE-Core rev: 827a805349f9732b2a5fa9184dc7922af36de327) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ffmpeg: Add fix for CVEs

2021-10-23T22:14:16+00:00

Add fix for below CVE: CVE-2021-3566 Link: [http://git.videolan.org/?p=ffmpeg.git;a=patch;h=3bce9e9b3ea35c54bacccc793d7da99ea5157532] CVE-2021-38291 Link: [http://git.videolan.org/?p=ffmpeg.git;a=patch;h=e01d306c647b5827102260b885faa223b646d2d1] (From OE-Core rev: 89df45b9e69a0d5c62a7e05156bc0d3fc85c77fd) Signed-off-by: Saloni Jain Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libsamplerate0: Set correct soname for 0.1.9

2021-10-07T14:10:33+00:00

Manually patch SHARED_VERSION_INFO, which was missed in the 0.1.9 release and later incorrectly fixed until 0.2.1 (From OE-Core rev: eb637a677dfed8680d680349e616a358795a7d56) Signed-off-by: Tom Pollard Signed-off-by: Richard Purdie (cherry picked from commit cb2e8efd316d44b9b1453882114856e0eb7b3500) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libsndfile: Security fix for CVE-2021-3246

2021-09-29T23:02:22+00:00

Source: https://github.com/libsndfile/libsndfile MR: 112098 Type: Security Fix Disposition: Backport from https://github.com/libsndfile/libsndfile/pull/713 ChangeID: 10d137de063b7a1e543ee96fbcf948945a452869 Description: (From OE-Core rev: f999bac187a935821f8580f3c5b1d08107ba9851) Signed-off-by: Armin Kuster Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gstreamer: ignore CVE-2021-3497, CVE-2021-3498, and CVE-2021-3522

2021-08-10T10:14:10+00:00

CPE entries for gst-plugins-* are listed as gstreamer issues so we need to ignore the false hits for the CVEs we've patched in plugins recipes (From OE-Core rev: 55140153e66f13a2d8a673a48f6c21e293415e56) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

Revert "gstreamer-plugins-base: ignore CVE-2021-3522 since it is fixed"

2021-08-10T10:14:10+00:00

Change is correct but should be in gstreamer recipe not gstreamer-plugins-base This reverts commit f32e90a7f8918aacda61ef6176eb1655742045b4. Signed-off-by: Richard Purdie

Revert "gstreamer-plugins-good: ignore CVE-2021-3497/8 since they are fixed"

2021-08-10T10:14:10+00:00

Change is correct but should be in gstreamer recipe not gstreamer-plugins-good This reverts commit d853e2bde1ea083f8438e8d7a80f041196d2e38d. Signed-off-by: Richard Purdie

gstreamer-plugins-good: ignore CVE-2021-3497/8 since they are fixed

2021-07-20T18:05:39+00:00

CPE entries for gst-plugins-good are listed as gstreamer issues so we need to ignore the false hits for the two CVEs we've patched (From OE-Core rev: d853e2bde1ea083f8438e8d7a80f041196d2e38d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gstreamer-plugins-base: ignore CVE-2021-3522 since it is fixed

2021-07-20T18:05:39+00:00

CPE entries for gst-plugins-base are listed as gstreamer issues so we need to ignore the false hit for the CVE we've patched (From OE-Core rev: f32e90a7f8918aacda61ef6176eb1655742045b4) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

gstreamer-plugins-base: fix CVE-2021-3522

2021-07-10T21:46:19+00:00

Out-of-bounds read in ID3v2 tag parsing reference: https://gstreamer.freedesktop.org/security/sa-2021-0001.html (From OE-Core rev: 8cab9d3dd226e854d40e12df497456adc3d3f81d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie