From 01116c0c47dc7a92e62cdbeadd7b72448fa4baa2 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 6 Oct 2025 20:27:36 +0200 Subject: [PATCH] libavif: upgrade 1.0.1 -> 1.3.0 This upgrade contains fixes for CVE-2025-48174 and CVE-2025-48175. Changelog: https://github.com/AOMediaCodec/libavif/blob/v1.3.0/CHANGELOG.md Libyuv support is currently disabled, because its dependency (libyuv) is not provided by neither oe-core nor meta-oe. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../recipes-multimedia/libavif/libavif_1.0.1.bb | 15 --------------- .../recipes-multimedia/libavif/libavif_1.3.0.bb | 16 ++++++++++++++++ 2 files changed, 16 insertions(+), 15 deletions(-) delete mode 100644 meta-multimedia/recipes-multimedia/libavif/libavif_1.0.1.bb create mode 100644 meta-multimedia/recipes-multimedia/libavif/libavif_1.3.0.bb diff --git a/meta-multimedia/recipes-multimedia/libavif/libavif_1.0.1.bb b/meta-multimedia/recipes-multimedia/libavif/libavif_1.0.1.bb deleted file mode 100644 index 9a82cd86bb..0000000000 --- a/meta-multimedia/recipes-multimedia/libavif/libavif_1.0.1.bb +++ /dev/null @@ -1,15 +0,0 @@ -SUMMARY = "This library aims to be a friendly, portable C implementation of the AV1 Image File Format" -HOMEPAGE = "https://github.com/AOMediaCodec/libavif" -SECTION = "libs" -LICENSE = "BSD-2-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=c528b75b07425b5c1d2e34de98c397b5" - -SRC_URI = "git://github.com/AOMediaCodec/libavif.git;protocol=https;branch=v1.0.x" - -SRCREV = "d1c26facaf5a8a97919ceee06814d05d10e25622" - -DEPENDS = "dav1d" - -inherit cmake - -EXTRA_OECMAKE += "-DAVIF_CODEC_DAV1D=ON" diff --git a/meta-multimedia/recipes-multimedia/libavif/libavif_1.3.0.bb b/meta-multimedia/recipes-multimedia/libavif/libavif_1.3.0.bb new file mode 100644 index 0000000000..44f5c1819a --- /dev/null +++ b/meta-multimedia/recipes-multimedia/libavif/libavif_1.3.0.bb @@ -0,0 +1,16 @@ +SUMMARY = "This library aims to be a friendly, portable C implementation of the AV1 Image File Format" +HOMEPAGE = "https://github.com/AOMediaCodec/libavif" +SECTION = "libs" +# Most is the code is under BSD-2, but libyuv is under BSD-3, and iccjpeg is under IJG +LICENSE = "BSD-2-Clause & BSD-3-Clause & IJG" +LIC_FILES_CHKSUM = "file://LICENSE;md5=51549db0941829faeedcc86efec2f4c0" + +SRC_URI = "git://github.com/AOMediaCodec/libavif.git;protocol=https;branch=main;tag=v${PV}" + +SRCREV = "1aadfad932c98c069a1204261b1856f81f3bc199" + +DEPENDS = "dav1d" + +inherit cmake + +EXTRA_OECMAKE += "-DAVIF_CODEC_DAV1D=ON -DAVIF_LIBYUV=OFF"