Commit Graph

1056 Commits

Author SHA1 Message Date
Fan Xin
d5e18f4a1a libsndfile1: Fix CVE-2017-6892
Backport upstream patch to fix CVE-2017-6892.

CVE: CVE-2017-6892

(From OE-Core rev: cc9b8d0afe64b83f585843f3aff1c077f69fd656)

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-28 15:52:18 +01:00
Alexander Kanavin
6b19b16272 libid3tag: fix upstream version check
(From OE-Core rev: cf4e2fad08227613ee2ba8d3935ddc23dc399467)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-28 15:52:17 +01:00
Alexander Kanavin
5e4cdeddd0 speex: fix upstream version check
(From OE-Core rev: 2488c95a0840a0c1867fb2d629bdb0582c4b9bad)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-28 15:52:17 +01:00
Khem Raj
f930cbc521 ffmpeg: Upgrade to 3.3.2 stable
* Fix mips/mips64 along the way, it was broken in 3.3 as well

(From OE-Core rev: ace103370746b7d8ae38701d2ef472f53a68edfb)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-23 11:44:14 +01:00
Richard Purdie
eb40fcf627 meta: Drop remnants of uclibc support
uclibc support was removed a while ago and musl works much better. Start to
remove the various overrides and patches related to uclibc which are no longer
needed.

uclibc support in a layer would still be possible. I have strong reasons to
believe nobody is still using uclibc since patches are missing and I doubt
the metadata even parses anymore.

(From OE-Core rev: 653704e9cf325cb494eb23facca19e9f05132ffd)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-22 09:16:00 +01:00
Maxin B. John
537ff6caaa libid3tag: switch from ftp to http
For the same reasons as Debian:
https://www.debian.org/News/2017/20170425

(From OE-Core rev: 134151fbf3ade16f1175002c76028adeb2426354)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14 14:53:57 +01:00
Khem Raj
3f18281a4c mpg123: Upgrade to 1.25.0
No need to skip textrel QA for x86 as it has
been fixed in 1.25.0

(From OE-Core rev: f635c097d0d43c88b00a00073b93712f1cc90fe0)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-13 10:46:34 +01:00
Tanu Kaskinen
637744d48d alsa-lib: 1.1.3 -> 1.1.4.1
Changelogs:
http://alsa-project.org/main/index.php/Changes_v1.1.3_v1.1.4
http://alsa-project.org/main/index.php/Changes_v1.1.4_v1.1.4.1

Dropped backported patch 0001-ucm-parser-needs-limits.h.patch.

(From OE-Core rev: e2ede4f9080e8a01504067347eb69051dc04b6ed)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12 15:08:31 +01:00
Tanu Kaskinen
c8897fecbd alsa-utils: 1.1.3 -> 1.1.4
Changelog: http://alsa-project.org/main/index.php/Changes_v1.1.3_v1.1.4

(From OE-Core rev: ae7e5f6ddfcc5637064b52d59ff517c2f94b9e86)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12 15:08:31 +01:00
Tanu Kaskinen
cb4b40af5c alsa-plugins: 1.1.1 -> 1.1.4
Changelog: http://alsa-project.org/main/index.php/Changes_v1.1.3_v1.1.4

(From OE-Core rev: df76886a40d665439f21cf743dcc36e01b86f685)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12 15:08:30 +01:00
Fan Xin
68e25dfade libtiff: Upgrade to 4.0.8
1. Upgrade libtiff from 4.0.7 to 4.0.8

2. Delete the following patch file due to CVE-2017-5225 has been fixed in 4.0.8
     libtiff-CVE-2017-5225.patch

(From OE-Core rev: 825927e85933322e6f195f0d937359017a9a9b97)

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-09 17:12:14 +01:00
Ross Burton
8f1663c457 gstreamer1.0-omx: delete broken m4 files
These m4 files need to be deleted so that the versions in the sysroot that we've
patched are used.  Specifically, building documentation fails as the gtk-doc
checks fail.

(From OE-Core rev: 4292886ee3b2311902af2b5aaa5f53c5b36c6bee)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-29 15:15:20 +01:00
Huang Qiyu
f0ff93c2a5 libsndfile1: 1.0.27 -> 1.0.28
Upgrade libsndfile1 from 1.0.27 to 1.0.28.

(From OE-Core rev: 86009f82c8c8206cc79f68d14d68c7c0b3ffe491)

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-23 17:45:36 +01:00
Alexander Kanavin
74f6169150 mpg123: update to 1.24.0
--with-module-suffix has been removed upstream.

(From OE-Core rev: ac5847fac825f3b4d88523a115ff12bc75542196)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-23 17:45:36 +01:00
Alexander Kanavin
f785e0f6ea ffmpeg: update to 3.3
--enabled-x11grab option has been removed upstream
(and it was described as 'legacy' in the previous version)

(From OE-Core rev: e7be4005355808173d55bcc9f053f59939cc0048)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-23 17:45:36 +01:00
Carlos Rafael Giani
33dc3dd55f mpeg2dec: upgrade to version 0.5.1
(From OE-Core rev: c2790aad53075bf7d68fa79a4871abd8625eb0a6)

Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-23 17:45:36 +01:00
Huang Qiyu
24f4847dab libpng: 1.6.28 -> 1.6.29
1) Upgrade libpng from 1.6.28 to 1.6.29.
2) License checksum changed,since the copyright date and contributing authors were updated.

(From OE-Core rev: 1a8438601db2e7fd367b6927f6fa4e03cb74854a)

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-18 14:01:48 +01:00
Marc Ferland
6196ab9253 speex: upgrade 1.2rc2 -> 1.2.0
Upgrade speex to 1.2.0. Very small diff between 1.2rc2 and 1.2.0, mostly
compiler warning fixes, tabs vs spaces, trailing whitespaces and one
liners.

(From OE-Core rev: 3e414545d650835e351f2939375c92ac7aca0569)

Signed-off-by: Marc Ferland <ferlandm@amotus.ca>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-16 14:08:30 +01:00
Khem Raj
0bec7a977a gstreamer1.0-libav: Fix build with gcc7
(From OE-Core rev: 828a7dd0a7f2a02118a97ece49ae35d1b0bc4611)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-11 16:59:18 +01:00
Jussi Kukkonen
1565a24918 gst-player: Disable visualizations as workaround
Audio playback in gtk-play is broken with vaapi because the
visualizations do not work: disable visualizations as workaround.
This should be reverted as soon as [YOCTO #11410] is fixed.

(From OE-Core rev: 1092a8d4bc78a53f60ad0137aeb08b31853db9eb)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-04-29 11:17:23 +01:00
Jussi Kukkonen
081e0a28f2 gstreamer1.0-vaapi: Fix playback breaking bug
gstreamer-vaapi fails to play files with specific frame sizes
because of buffer allocation issues. Fix is a backport.

Fixes [YOCTO #11311].

(From OE-Core rev: e01eb9b37ba5512d6fd9893c70b1f4d766fab2ac)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-04-29 11:17:22 +01:00
Carlos Rafael Giani
7252450159 gstreamer1.0-plugins-good: Backport patch for v4l2object videometa
This patch ensures videometa is added to mem2mem decoder output in case
the output frames have padding rows/columns

(From OE-Core rev: ef94ffee8f11db57ecea398af76dc22576c2068a)

Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-04-11 18:10:18 +01:00
Carlos Rafael Giani
a9dfae4e26 gstreamer1.0-plugins-bad: Update packageconfigs and config flags
(From OE-Core rev: 5acad7f33aebfac4c5a3a68778f5860f954904fe)

Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-04-11 18:10:18 +01:00
Khem Raj
c6344d3b6a libvorbis: Contain gcc specific compiler flags using configure option
(From OE-Core rev: b6cdbf50e5c26c406e4ddecd66202ff7324f5468)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-24 23:43:32 +00:00
Joshua Lock
cc2744267f meta: replace uses of bb.data.expand(VARNAME, d) with d.expand(VARNAME)
bb.data.expand(x, d) is deprecated API.

[YOCTO #10678]

(From OE-Core rev: a361babe443da635aed83be46679067457fd6a58)

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-22 11:35:19 +00:00
Jussi Kukkonen
cd85351240 gstreamer1.0-vaapi: Remove unused patch
This patch has seemingly never been applied in the recipe (even when
it lived in meta-intel). I don't think we should have unused patches
in the repo: If the patch is useful it could be reintroduced so that
the binaries are packaged into a separate package.

(From OE-Core rev: cd33ae2f21547354e1ef9776b2c4ebcea4eb7e99)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-16 22:11:32 +00:00
Jussi Kukkonen
209bb1bc3d gstreamer1.0-omx: Remove unused patch
The patch was only used in the ancient and recently removed git recipe.

(From OE-Core rev: 2d2d4c31d04f5f29250a307c1f3da739ab351ecd)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-16 22:11:32 +00:00
Ross Burton
c9d0d44e3c gstreamer: remove git recipes
Yet again these were checking out 1.8.2 tags and then trying to apply 1.10.4
patches on top.

Clearly nobody is actually using them, so delete them so they can't go stale
again.

(From OE-Core rev: 2b15451e3f1b9fb9a7f44317f3f9cd22d8712ff5)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-10 14:50:11 +00:00
Maxin B. John
a041053056 gstreamer1.0-omx_1.2.0: remove recipe
Removing this recipe since we have the latest gstreamer1.0-omx_1.10.4
in place.

(From OE-Core rev: aa06a18d59eb391d1a7ace9daa0681bdf8daf17f)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-04 23:18:20 +00:00
Andreas Oberritter
09c85a8307 ffmpeg: use static package list
Dynamic packaging isn't useful if every library needs to be
listed manually.

This also merges the -dev packages into a single ffmpeg-dev, as is typical.

(From OE-Core rev: 7731035a14e3caf90ae220692ec2def5cb1aaad5)

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:10 +00:00
Maxin B. John
2cdaa0c493 gstreamer: update to 1.10.4
bug-fix release:
 *) Various fixes for crashes, assertions, deadlocks and memory leaks on
fuzzed input files and in other situations (CVE-2017-5847, CVE-2017-5848)
 *) gst-libav was updated to ffmpeg 3.2.4, fixing a couple of CVEs

(From OE-Core rev: 6718e2cbb40fb8cb90f98f297fdfb6cbf01d52c8)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:10 +00:00
Alexander Kanavin
1f17010446 libwebp: update to 0.6.0
(From OE-Core rev: 6276f70d6925d8e72078e1974e77dc6433aab2dc)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:09 +00:00
Alexander Kanavin
85e5541cd0 ffmpeg: update to 3.2.4
(From OE-Core rev: 453681bd6b2221f2adc681c9774b30d2237b3a73)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:08 +00:00
Jussi Kukkonen
d4369c5004 x264: Upgrade to stable branch head
Small number of bug fixes and x86 optimizations.

(From OE-Core rev: a8aff2a0e77c401fee5a94a906ab355814505157)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:07 +00:00
Jussi Kukkonen
d0842818fb gst-player: Upgrade to recent git revision
The update contains a small number of bug fixes. Removed one
upstreamed patch.

gst-player does not have releases: this is the current git master.

(From OE-Core rev: 72889d45c610c4895c6a2f439439755ef4853fab)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 23:27:07 +00:00
Peter Kjellerstedt
254bfb1071 recipes: Make use of the new bb.utils.filter() function
(From OE-Core rev: 0a1427bf9aeeda6bee2cc0af8da4ea5fd90aef6f)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-01 11:17:45 +00:00
Andreas Oberritter
e60cb049d1 ffmpeg: Fix the license description
FFmpeg has complicated licensing options, so it should also
have complicated license statements in its recipe.

(From OE-Core rev: b0881c295e868535a8eb55fc0658a330d0f1465d)

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:52 -08:00
Tanu Kaskinen
5424dc2a21 alsa-lib: merge alsa-conf-base into alsa-conf
As far as I can see, there's no benefit in having separate alsa-conf and
alsa-conf-base packages. libasound depended on both, so it was not
really possible to only install alsa-conf-base.

(From OE-Core rev: 04b57e357bc016d174015a56077bb026ad9bb498)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:52 -08:00
Tanu Kaskinen
06fe5024e2 alsa-lib: fix softfloat enabling
EXTRA_OECONF = "--disable-python" overrode the previous EXTRA_OECONF
assignment, so softfloat didn't get enabled when needed. Fixed this by
replacing "=" with "+=".

Bitbake then complained about tabs in alsa-fpu.inc, changed them to
spaces.

(From OE-Core rev: 1ed6f860de22321342404a49ba78658153ff5eb8)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:52 -08:00
Tanu Kaskinen
5286f9c310 alsa-lib: 1.1.2 -> 1.1.3
Changelog: http://alsa-project.org/main/index.php/Changes_v1.1.2_v1.1.3

Added a patch to fix a build failure with musl (cherry-picked from
upstream).

The new release doesn't any more install the smixer modules when Python
support is disabled. The modules weren't usable without Python support
before either, so this change does not constitute a loss of
functionality [1].

alsa-lib-dev has automatic dependencies on alsa-lib and libasound, but
since the smixer modules were the only thing in the alsa-lib package,
the alsa-lib package doesn't get generated any more. alsa-lib-dev still
has an automatic dependency on alsa-lib, however, so I had to override
the RDEPENDS of alsa-lib-dev to only include libasound.

[1] http://mailman.alsa-project.org/pipermail/alsa-devel/2016-November/114682.html

(From OE-Core rev: dc549b5510bfcf83f6e5e8e3aa7ed663dee83444)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:52 -08:00
Ross Burton
0cce08ba5a gstreamer1.0-vaapi: inherit upstream-version-is-even
These plugins follow the GStreamer versioning, so inherit this class to ensure
we don't get notified about development releases.

(From OE-Core rev: cde7b38bcbd419799070da92013b4ea98468e643)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:51 -08:00
Ross Burton
d16219b754 tremor: remove
Now that Tremor isn't enabled by default in oe-core's GStreamer plugins and has
been added to meta-multimedia, it can be removed from oe-core.

(From OE-Core rev: 30f5c80943f69884b3d7323b540c8bb0f1efd8fd)

(From OE-Core rev: a8b476e7d6a5bf43cceb8c7b2610c9b66fe2f33e)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-23 12:49:49 -08:00
Tanu Kaskinen
36f6e71ccb pulseaudio: 9.0 -> 10.0
Relase notes:
https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/10.0/

The checksum of the LICENSE file changed due to some clarifications.
There were no changes to the actual licensing terms.

The LICENSE variable was not accurate, so I made changes to it.
Specifically:
 * there's no GPL code in PulseAudio so I dropped GPL from the list
 * the LGPL code allows using later versions of the license rather than
   limiting to just 2.1
 * there are some MIT and BSD licensed bits

I added more files to LIC_FILES_CHKSUM to have better coverage of all
the differently licensed code.

Dropped json-c and gdbm from DEPENDS. The new release doesn't use json-c
any more. gdbm isn't used when --with-database=simple is passed to
configure, so it should have been removed from DEPENDS a long time ago.

The new release dropped the Xen module, so the --without-xen configure
option isn't needed any more.

Added a comment for why --without-fftw is used.

Disabled the adrian echo canceller, because it has an unusual license,
and disabling the code was simpler than adding a new license to OE-Core.

Dropped upstreamed patches.

(From OE-Core rev: 4ddaf28fd36294fd940f26d55973da20eeeeb0d8)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-15 20:06:41 -08:00
Nicolas Dechesne
51481fe9bb gstreamer: update to 1.10.3
New bugfix release:
* updated version/checksums
* removed 1 patch in -good which was merged upstream

(From OE-Core rev: f61cdef0a8b2771225c6bc86881a16f8ef747983)

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-05 09:22:17 +00:00
Andreas Oberritter
34099fa18c ffmpeg: disable cpu autodetection
Just pass the correct -mcpu= configure switch (fallback to generic).

Avoids warnings like:
| warning: switch -mcpu=cortex-a15 conflicts with -march=armv7-a switch

(From OE-Core rev: 68aad8d179161c5fec75bf311060d829e4346c9f)

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-05 09:22:16 +00:00
Li Zhou
49f6a9e794 libtiff: Security Advisory - libtiff - CVE-2017-5225
Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

(From OE-Core rev: 434990304bdfb70441b399ff8998dbe3fe1b1e1f)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-31 14:43:01 +00:00
Maxin B. John
8f90c28397 libpng: Upgrade 1.6.26 -> 1.6.28
This upgrade fixes the vulnerability: CVE-2016-10087

License file changes are due to updates in Package Version
and Copyright date. ie:
 'libpng version 1.6.28, January 5, 2017'

(From OE-Core rev: 94bb606b9f21b7fe4c5d7e9ae3fda17da047ece5)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-26 10:44:28 +00:00
Ross Burton
06272333ac gstreamer1.0-plugins-base: disable ivorbis
Even old hardware these days doesn't really need fixed-integer Vorbis decoding
by default, so disable Tremor out of the box.

(From OE-Core rev: 958926dd51d5e18ef983280a6e3b50fc8f33eb12)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-26 10:44:27 +00:00
Richard Purdie
ab7fef0ebc tremor: Use mirror tarball instead of svn url
This is the only remaining svn url in OE-Core and building subversion-native
for things like the url checker is wearing and slows down builds. Since
this rarely changes, use the mirror tarball instead.

(From OE-Core rev: 0be6f3b5a69a65107b49a90bee98815a5a7ac9d8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-23 22:38:49 +00:00
Tanu Kaskinen
12106c68cd alsa-tools: 1.1.0 -> 1.1.3
Drop 0001-Cus428Midi-Explicitly-cast-constant-to-char-type.patch,
because the new release has an equivalent fix (and that's actually the
only change in the new release).

(From OE-Core rev: df748d5b9f1cc0166cb8de5d770e001171cc3926)

Signed-off-by: Tanu Kaskinen <tanuk@iki.fi>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-01-23 12:05:21 +00:00