openembedded-core.git/meta/recipes-multimedia, branch dora

x264: Update SRCREV to match commit in upstream git repo

2014-06-17T16:59:55+00:00

It seems that 585324fee380109acd9986388f857f413a60b896 is no
longer there in git and it has been rewritten to
ffc3ad4945da69f3caa2b40e4eed715a9a8d9526

Change-Id: I9ffe8bd9bcef0d2dc5e6f6d3a6e4317bada8f4be
(master rev: b193c7f251542aa76cb5a4d6dcb71d15b27005eb)

Signed-off-by: Khem Raj 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie 
Signed-off-by: Patrick Doyle 
Signed-off-by: Robert Yang 
Signed-off-by: Richard Purdie

libomxil: Fix link issue for gst-omx

2014-03-11T14:56:29+00:00

gst-omx element can not load due to a missing symbol.
Missing symbol RM_Deinit.

(From OE-Core master rev: 56301698a55bcbab4272b273fd98ce4de84cbfac)

Signed-off-by: Sébastien Mennetrier 
Signed-off-by: Richard Purdie 
Signed-off-by: Robert Yang 
Signed-off-by: Richard Purdie

pulseaudio: only package consolekit module when x11 is enabled

2014-02-13T12:35:45+00:00

As requested by Martin Jansa .

(From OE-Core master rev: 3e148f863d55728bbfa2d94b602b03dc56b70d4c)

Signed-off-by: Christopher Larson 
Signed-off-by: Richard Purdie

libav: add libpostproc to PROVIDES (for 0.8.x version only)

2014-01-26T06:08:17+00:00

There is a separate libpostproc recipe in meta-oe for use with 9.x and
later versions of libav for those few that need libpostproc; however if
you just add meta-oe and try to build libpostproc without selecting the
libav 9.x version recipe, you'll be building the libpostproc recipe
together with libav 0.8.x, which provides its own libpostproc; this
leads to confusing errors at packaging time. In order to flag up that
these conflict more appropriately, add libpostproc to PROVIDES
explicitly so that you at least get a multiple providers error at the
start of the build.

Fixes [YOCTO #5335].

(From OE-Core master rev: e8f9420fe901675fc1a8d4e41302c2faa4a7dc4a)

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie 
Signed-off-by: Robert Yang

pulseaudio: fix RDEPENDS traversal for consolekit

2014-01-26T06:08:15+00:00

Include the console-kit module in PACKSGES explicitly so bitbake can map to
the RDEPENDS we define for it in this recipe, and thereby ensure that when
adding the console-kit module to an image, we also get the necessary
consolekit package produced.

(From OE-Core master rev: 7e7ff7d1e5e86f097ef40befcf00dd28657e26f8)

Signed-off-by: Christopher Larson 
Signed-off-by: Richard Purdie 
Signed-off-by: Robert Yang

libav: install libraries to right directory when multilib is enabled

2014-01-26T06:07:56+00:00

Explicitly set libdir and shlibdir to ${libdir} in EXTRA_OECONF. Otherwise, default library path of ${prefix}/lib is used which is incorrect in a multilib build.

(From OE-Core master rev: e16b6bab8d5286cdf58d808ef4c195127d69a8c8)

Signed-off-by: Nick D'Ademo 
Signed-off-by: Richard Purdie 
Signed-off-by: Robert Yang

x264: install libraries to right directory when enable multilib

2014-01-26T06:07:55+00:00

x264 use [EPREFIX/lib] as default libdir. When multlib is enabled that
is not right. Packages depends on x264 such as libav configure fails
that can't find library x264.

Pass the right libdir to configure script to fix it.

(From OE-Core master rev: d1deb07d158cf27bce2ee95e2f02b4fd1d00fe21)

Signed-off-by: Kai Kang 
Signed-off-by: Richard Purdie 
Signed-off-by: Robert Yang

libtiff: CVE-2013-4243

2013-12-12T16:56:39+00:00

cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4243

Signed-off-by: Baogen Shang 
Signed-off-by: Mark Hatle 
Signed-off-by: Robert Yang

libtiff: CVE-2013-4232

2013-12-12T16:56:38+00:00

cve description:
Use-after-free vulnerability in the t2p_readwrite_pdf_image function
in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause
a denial of service (crash) or possible execute arbitrary code via a
crafted TIFF image.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4232

Signed-off-by: Baogen Shang 
Signed-off-by: Mark Hatle 
Signed-off-by: Robert Yang

libtiff: fix CVE-2013-1960

2013-12-12T16:56:38+00:00

Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1960

Signed-off-by: Ming Liu 
Signed-off-by: Jeff Polk 
Signed-off-by: Robert Yang