commit 0e513c09e9ab5d1b6fcb3e6a3019203a3f861881f34674e4c76fce34865e9e25 Author: Adrian Schröter Date: Fri May 3 16:05:17 2024 +0200 Sync from SUSE:SLFO:Main libvorbis revision 22144b6894694a9aa776eb289f525341 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/_multibuild b/_multibuild new file mode 100644 index 0000000..2a30bb8 --- /dev/null +++ b/_multibuild @@ -0,0 +1,4 @@ + + libvorbis-doc + + diff --git a/baselibs.conf b/baselibs.conf new file mode 100644 index 0000000..4f7cb52 --- /dev/null +++ b/baselibs.conf @@ -0,0 +1,10 @@ +libvorbis0 + targettype 32bit provides "libvorbis- = " + targettype 32bit obsoletes "libvorbis- < 1.3.2" +libvorbisenc2 +libvorbisfile3 +libvorbis-devel + requires "libvorbis0- = " + requires "libvorbisenc2- = " + requires "libvorbisfile3- = " + diff --git a/libvorbis-1.3.7.tar.xz b/libvorbis-1.3.7.tar.xz new file mode 100644 index 0000000..1812c03 --- /dev/null +++ b/libvorbis-1.3.7.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b33cc4934322bcbf6efcbacf49e3ca01aadbea4114ec9589d1b1e9d20f72954b +size 1203792 diff --git a/libvorbis-1.3.7.tar.xz.asc b/libvorbis-1.3.7.tar.xz.asc new file mode 100644 index 0000000..342689c --- /dev/null +++ b/libvorbis-1.3.7.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEt7AK7h+WDuoP7Wb7klmo8tLUTIQFAl8AIpkACgkQklmo8tLU +TIRcpBAArhcRWPNa+goaPGs0pvfgRHwxGTMNKbd8PDHhDL8yXQnYEzRktgCfwcXZ ++4yd1hoLMFOd1IyBASoCaxk05lbDhGKVHZo3jhxKztxweXvdgYl/dwmZTmN/EO1K +e3RycUYrJ18S4ujdCBxbYTVf6+0rsGL+UYo8rtHtyrKSGuwHqUEq+gtwVPS7U836 +Pbgxpin+CwElGRrZLEfh3fUTYnIjZYmlaUcplQdkZuFgSxP1t40InjmwkP+gQfSk +kPfxoqSDH7EgVzOOl8jFxVxyHVUKYbJ4LYnP1E6of1RxOQW7QBxaUY3/i/B6XDTD +cME7BAdr1ogXiDnasDYZzsbK+ySvtlylK6kqdvhHHfHtC1sMj/WnUniwE+I5k7IC +yLArvQyk9okdGCw20tH2Kp3nOVXicoqgIUVQ6LoYusSjccgFYPqAqe50i1iuohRA +W9Nj5jDd0kyf0pngBJn8y/KXThtsbPw//CIVi7amb3kkHUb8O3CJlRfO18wsmvmK +0iBtUUp3E0rL3I7aJnZLIZAppV+yO3hbUJCiPT0YyVdh7o+RCsTV1+XIQcaBrg0V +ThmTUggXO5keuuvu39P3OQakLarAiQcGJqpGekzeJ/q5WTxxvegeqOC0rCgDW7tY +9md0WZ9ATOqrrDfcwp2vCLpleiPUuvrfl8ceEts6WSibqN7Gcg4= +=ZAOg +-----END PGP SIGNATURE----- diff --git a/libvorbis-doc.changes b/libvorbis-doc.changes new file mode 100644 index 0000000..77dba04 --- /dev/null +++ b/libvorbis-doc.changes @@ -0,0 +1,5 @@ +------------------------------------------------------------------- +Sat Mar 17 14:55:12 CET 2018 - tiwai@suse.de + +- Split from libvorbis.spec to reduce the build dependencies + diff --git a/libvorbis-doc.spec b/libvorbis-doc.spec new file mode 100644 index 0000000..64ddaea --- /dev/null +++ b/libvorbis-doc.spec @@ -0,0 +1,98 @@ +# +# spec file for package libvorbis-doc +# +# Copyright (c) 2023 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%if 0%{?suse_version} > 1320 +%define build_docs 1 +%else +%define build_docs 0 +%endif + +Name: libvorbis-doc +Version: 1.3.7 +Release: 0 +Summary: Documentation of Ogg/Vorbis library +License: BSD-3-Clause +Group: Documentation/Other +URL: https://www.vorbis.com/ +Source: https://downloads.xiph.org/releases/vorbis/libvorbis-%{version}.tar.xz +Source1: https://downloads.xiph.org/releases/vorbis/libvorbis-%{version}.tar.xz.asc +Source99: libvorbis.keyring +Patch1: libvorbis-lib64.dif +Patch2: libvorbis-m4.dif +Patch12: vorbis-ocloexec.patch +BuildRequires: fdupes +BuildRequires: libogg-devel +BuildRequires: libtool +BuildRequires: pkgconfig +BuildRequires: xz +%if %build_docs +BuildRequires: doxygen +BuildRequires: texlive-babel-english +BuildRequires: texlive-latex +BuildRequires: texlive-tex4ht +BuildRequires: tex(a4wide.sty) +BuildRequires: tex(capt-of.sty) +BuildRequires: tex(csquotes.sty) +BuildRequires: tex(enumitem.sty) +BuildRequires: tex(fancyvrb.sty) +BuildRequires: tex(grffile.sty) +BuildRequires: tex(parskip.sty) +BuildRequires: tex(ulem.sty) +BuildRequires: tex(underscore.sty) +%endif +BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildArch: noarch + +%description +This package contains documents for Ogg/Vorbis library, including the +API reference. + +%prep +%setup -q -n libvorbis-%{version} +%patch2 +# %%patch5 -p1 +if [ "%{_lib}" == "lib64" ]; then +%patch1 +fi +%patch12 + +%build +autoreconf -fiv +%configure \ +%if %build_docs + --enable-docs \ +%endif + --disable-examples \ + --disable-static +# parallel-build of docs may fail +make -C doc +# we don't build anything but docs + +%install +make -C doc DESTDIR=%{buildroot} install +mkdir -p %{buildroot}%{_docdir} +mv %{buildroot}%{_datadir}/doc/libvorbis-* %{buildroot}%{_docdir}/%{name} +# remove unneeded files +find %{buildroot}%{_docdir}/ -empty -delete +%fdupes -s %{buildroot}%{_docdir} + +%files +%defattr(-,root,root) +%doc %{_docdir}/%{name} + +%changelog diff --git a/libvorbis-lib64.dif b/libvorbis-lib64.dif new file mode 100644 index 0000000..5bf729e --- /dev/null +++ b/libvorbis-lib64.dif @@ -0,0 +1,18 @@ +--- + vorbis.m4 | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +--- vorbis.m4.orig ++++ vorbis.m4 +@@ -20,9 +20,9 @@ + elif test "x$vorbis_prefix" = "xno" || test "x$vorbis_prefix" = "xyes" ; then + VORBIS_LIBS="" + elif test "x$vorbis_prefix" != "x" ; then +- VORBIS_LIBS="-L$vorbis_prefix/lib" ++ VORBIS_LIBS="-L$vorbis_prefix/lib64" + elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then +- VORBIS_LIBS="-L$prefix/lib" ++ VORBIS_LIBS="-L$prefix/lib64" + fi + + if test "x$vorbis_prefix" != "xno" ; then diff --git a/libvorbis-m4.dif b/libvorbis-m4.dif new file mode 100644 index 0000000..69b3c59 --- /dev/null +++ b/libvorbis-m4.dif @@ -0,0 +1,24 @@ +--- + vorbis.m4 | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +--- vorbis.m4.orig ++++ vorbis.m4 +@@ -21,7 +21,7 @@ + VORBIS_LIBS="" + elif test "x$vorbis_prefix" != "x" ; then + VORBIS_LIBS="-L$vorbis_prefix/lib" +- elif test "x$prefix" != "xNONE"; then ++ elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then + VORBIS_LIBS="-L$prefix/lib" + fi + +@@ -37,7 +37,7 @@ + VORBIS_CFLAGS="" + elif test "x$vorbis_prefix" != "x" ; then + VORBIS_CFLAGS="-I$vorbis_prefix/include" +- elif test "x$prefix" != "xNONE"; then ++ elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then + VORBIS_CFLAGS="-I$prefix/include" + fi + diff --git a/libvorbis.changes b/libvorbis.changes new file mode 100644 index 0000000..17205e7 --- /dev/null +++ b/libvorbis.changes @@ -0,0 +1,588 @@ +------------------------------------------------------------------- +Thu May 4 11:06:48 UTC 2023 - Dominique Leuenberger + +- Add _multibuild to define 2nd spec file as additional flavor. + Eliminates the need for source package links in OBS. + +------------------------------------------------------------------- +Mon Mar 13 08:28:53 UTC 2023 - Martin Pluskal + +- Build AVX2 enabled hwcaps library for x86_64-v3 +- Small spec file cleanup + +------------------------------------------------------------------- +Wed Jun 15 13:55:43 UTC 2022 - Callum Farmer + +- Remove bad %defattr - not needed and causes SHLIB non-executable + rpmlint error + +------------------------------------------------------------------- +Fri Jul 10 10:14:43 UTC 2020 - Martin Hauke + +- Update to version 1.3.7 + * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read + encoding very low sample rates + * Fix CVE-2017-14160 - out-of-bounds read encoding very low + sample rates. + * Fix handling invalid bytes per sample arguments. + * Fix handling invalid channel count arguments. + * Fix invalid free on seek failure. + * Fix negative shift reading blocksize. + * Fix accepting unreasonable float32 values. + * Fix tag comparison depending on locale. + * Fix unnecessarily linking libm. + * Fix memory leak in test_sharedbook. + * Distribute CMake build files with the source package. + * Remove unnecessary configure --target switch. + * Add OSS-Fuzz support. + * Build system and integration updates. +- Drop not longer needed patches (fixed by upstream): + * vorbis-CVE-2017-14160.patch + * vorbis-CVE-2018-10392.patch + * vorbis-CVE-2018-10393.patch +- Add source verification + +------------------------------------------------------------------- +Tue Jun 5 11:37:54 CEST 2018 - tiwai@suse.de + +- Replace vorbis-CVE-2017-14160.patch with the upstream fix + (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch +- Fix the validation of channels in mapping0_forward() + (CVE-2018-10392, bsc#1091070): + vorbis-CVE-2018-10392.patch + +------------------------------------------------------------------- +Thu May 3 15:56:28 CEST 2018 - tiwai@suse.de + +- Fix out-of-bounds access inside bark_noise_hybridmp function + (CVE-2017-14160, bsc#1059812): + downstream fix: vorbis-CVE-2017-14160.patch +- Fix stack-basedbuffer over-read in bark_noise_hybridm + (CVE-2018-10393, bsc#1091072): + downstream fix: vorbis-CVE-2018-10393.patch + +------------------------------------------------------------------- +Sat Mar 17 14:54:44 CET 2018 - tiwai@suse.de + +- Split libvorbis-doc subpackage to a separate spec file for + reducing the dependencies + +------------------------------------------------------------------- +Fri Mar 16 22:12:35 CET 2018 - tiwai@suse.de + +- Update to version 1.3.6: + * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding. + * Fix CVE-2017-14632 - free() on unitialized data + * Fix CVE-2017-14633 - out-of-bounds read + * Fix bitrate metadata parsing. + * Fix out-of-bounds read in codebook parsing. + * Fix residue vector size in Vorbis I spec. + * Appveyor support + * Travis CI support + * Add secondary CMake build system. + * Build system fixes +- Build documents with doxygen, and many tex stuff; + this requires to disable parallel builds partially +- Move COPYING to license directory +- Drop obsoleted patches: + vorbis-fix-linking.patch + 0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch + 0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch + libvorbis-CVE-2018-5146.patch + +------------------------------------------------------------------- +Fri Mar 16 20:02:45 CET 2018 - tiwai@suse.de + +- Fix VUL-0: libvorbis: Out of bounds memory write while processing + Vorbis audio data (CVE-2018-5146, bsc#1085687): + libvorbis-CVE-2018-5146.patch + +------------------------------------------------------------------- +Tue Dec 19 14:32:18 CET 2017 - tiwai@suse.de + +- Fix VUL-0: out-of-bounds array read vulnerability exists in + function mapping0_forward() (CVE-2017-14633, bsc#1059811): + 0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch +- Fix VUL-0: Remote Code Execution upon freeing uninitialized + memory in function vorbis_analysis_headerout(CVE-2017-14632, + bsc#1059809): + 0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch + +------------------------------------------------------------------- +Tue Nov 29 12:14:08 UTC 2016 - aloisio@gmx.com + +- Added 32bit libvorbis-devel in baselibs.conf + +------------------------------------------------------------------- +Fri Mar 6 15:23:26 UTC 2015 - mpluskal@suse.com + +- Cleanup spec file with spec-cleaner +- Update to 1.3.5 + * Tolerate single-entry codebooks. + * Fix decoder crash with invalid input. + * Fix encoder crash with non-positive sample rates. + * Fix issues in vorbisfile's seek bisection code. + * Spec errata. + * Reject multiple headers of the same type. + * Various build fixes and code cleanup. + +------------------------------------------------------------------- +Mon Aug 18 14:36:27 CEST 2014 - fcrozat@suse.com + +- Fix obsoletes and provides in baselibs.conf. + +------------------------------------------------------------------- +Sun Feb 23 19:43:16 UTC 2014 - andreas.stieger@gmx.de + +- Xiph libvorbis 1.3.4 + * reduced static data size in libvorbisenc + * associated minor changes required to libvorbis and libvorbisfile + * minor build fixes and build system updates + * no functional changes over the previous 1.3.3 release +- removed libvorbis-pkgconfig.patch, in upstream +- updated vorbis-fix-linking.patch for context changes + +------------------------------------------------------------------- +Tue Apr 16 06:46:59 UTC 2013 - mmeister@suse.com + +- Added url as source. + Please see http://en.opensuse.org/SourceUrls + +------------------------------------------------------------------- +Sat Mar 2 12:59:01 UTC 2013 - seife+obs@b1-systems.com + +- fix build with automake-1.13.1 + +------------------------------------------------------------------- +Wed Jun 20 15:42:24 UTC 2012 - ftake@geeko.jp + +- updated to 1.3.3 + * vorbis: additional proofing against invalid/malicious + streams in decode (see SVN for details). + * vorbis: fix a memory leak in vorbis_commentheader_out(). + * updates, corrections and clarifications in the Vorbis I + specification document + * build warning fixes + +------------------------------------------------------------------- +Tue Feb 21 14:32:38 CET 2012 - tiwai@suse.de + +- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow + (bnc#747912) + +------------------------------------------------------------------- +Sun Dec 25 11:09:50 UTC 2011 - idonmez@suse.com + +- -O20 optimization level doesn't exist, use -O3 + +------------------------------------------------------------------- +Fri Nov 25 21:08:52 UTC 2011 - crrodriguez@opensuse.org + +- open files with O_CLOEXEC, in order to avoid fd leaks + when calling applications fork() ..execve()... + This patch does not cover the executable tools since + it is not critical for them. + +------------------------------------------------------------------- +Tue Nov 22 10:21:04 UTC 2011 - coolo@suse.com + +- add libtool as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Mon Aug 29 19:00:55 UTC 2011 - crrodriguez@opensuse.org + +- Fix build with no-add-needed + +------------------------------------------------------------------- +Thu May 5 22:56:15 CEST 2011 - dmueller@suse.de + +- fix provides/obsoletes in baselibs + +------------------------------------------------------------------- +Thu Dec 9 22:14:53 UTC 2010 - davejplater@gmail.com + +- Split libvorbisenc2 and libvorbisfile3 from libvorbis0 +- Removed services. + +------------------------------------------------------------------- +Wed Dec 8 15:52:05 UTC 2010 - coolo@novell.com + +- fix the package split + +------------------------------------------------------------------- +Wed Dec 8 04:23:34 UTC 2010 - reddwarf@opensuse.org + +- updated to version 1.3.2 + * vorbis: additional proofing against invalid/malicious + streams in floor, residue, and bos/eos packet trimming + code (see SVN for details). + * vorbis: Added programming documentation tree for the + low-level calls + * vorbisfile: Correct handling of serial numbers array + element [0] on non-seekable streams + * vorbisenc: Back out an [old] AoTuV HF weighting that was + first enabled in 1.3.0; there are a few samples where I + really don't like the effect it causes. + * vorbis: return correct timestamp for granule positions + with high bit set. + * vorbisfile: the [undocumented] half-rate decode api made no + attempt to keep the pcm offset tracking consistent in seeks. + Fix and add a testing mode to seeking_example.c to torture + test seeking in halfrate mode. Also remove requirement that + halfrate mode only work with seekable files. + * vorbisfile: Fix a chaining bug in raw_seeks where seeking + out of the current link would fail due to not + reinitializing the decode machinery. + * vorbisfile: improve seeking strategy. Reduces the + necessary number of seek callbacks in an open or seek + operation by well over 2/3. +- updated to version 1.3.1 + * tweak + minor arithmetic fix in floor1 fit + * revert noise norm to conservative 1.2.3 behavior pending + more listening testing +- updated to versio 1.3.0 + * Optimized surround support for 5.1 encoding at 44.1/48kHz + * Added encoder control call to disable channel coupling + * Correct an overflow bug in very low-bitrate encoding on 32 bit + machines that caused inflated bitrates + * Numerous API hardening, leak and build fixes + * Correct bug in 22kHz compand setup that could cause a crash + * Correct bug in 16kHz codebooks that could cause unstable pure + tones at high bitrates +- run spec-cleaner +- removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff, + libvorbis-r16326-CVE-2009-3379.diff and + libvorbis-r16597-CVE-2009-3379.diff (upstream fixed) +- follow library packaging policy +- run make check + +------------------------------------------------------------------- +Wed May 26 15:03:32 CEST 2010 - tiwai@suse.de + +- VUL-0: libvorbis: memory corruption while parsing ogg files + (bnc#608192, CVE-2009-3379) + +------------------------------------------------------------------- +Wed Dec 16 10:17:40 CET 2009 - jengelh@medozas.de + +- add baselibs.conf as a source +- enable parallel building +- package documentation as noarch + +------------------------------------------------------------------- +Wed Nov 11 10:56:23 CET 2009 - tiwai@suse.de + +- updated to version 1.2.3: + * correct a vorbisfile bug that prevented proper playback of + Vorbis files where all audio in a logical stream is in a + single page + * Additional decode setup hardening against malicious streams + * Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who + wish to avoid avoid unused symbol warnings from the static + callbacks defined in vorbisfile.h + +- updated to version 1.2.2: + * define VENDOR and ENCODER strings + * seek correctly in files bigger than 2 GB (Windows) + * fix regression from CVE-2008-1420; 1.0b1 files work again + * mark all tables as constant to reduce memory occupation + * additional decoder hardening against malicious streams + * substantially reduce amount of seeking performed by Vorbisfile + * Multichannel decode bugfix + * build system updates + * minor specification clarifications/fixes + +- dropped aotuv patch temporarily + +------------------------------------------------------------------- +Thu Jul 23 15:28:13 CEST 2009 - tiwai@suse.de + +- updated to aoTuV patch version beta5.7: + * including security fixes + * improved encoding speed of low bitrate mode + * reduced distrotion by clipping at low sampling frequency + * fixed noise control part of impulse block + * tuning of each part was redone + * expanded noise control of the impulse block + * fixed pre-echo reduction code + * noise normalization reviewed + * detailed tuning done again + +------------------------------------------------------------------- +Mon Jun 22 09:47:22 CEST 2009 - coolo@novell.com + +- fix build with automake 1.11 + +------------------------------------------------------------------- +Wed Jan 7 12:34:56 CET 2009 - olh@suse.de + +- obsolete old -XXbit packages (bnc#437293) + +------------------------------------------------------------------- +Thu Nov 20 16:48:52 CET 2008 - pth@suse.de + +- Fix the test in libvorbis-m4.dif and adapt libvorbis-lib64.dif. + +------------------------------------------------------------------- +Wed May 14 16:41:31 CEST 2008 - tiwai@suse.de + +- VUL-0: Multiple vulnerabilities in libogg and libvorbis + (bnc#372246) + * CVE-2008-1419 vorbis: zero-dim codebooks can cause crash, + infinite loop or heap overflow + * CVE-2008-1420 vorbis: integer overflow in partvals computation + * CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks + +------------------------------------------------------------------- +Mon Apr 28 12:56:34 CEST 2008 - tiwai@suse.de + +- fixed dependency in *.pc files (bnc#384153) +- removed old run_ldconfig + +------------------------------------------------------------------- +Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de + +- added baselibs.conf file to build xxbit packages + for multilib support + +------------------------------------------------------------------- +Thu Aug 2 12:22:21 CEST 2007 - tiwai@suse.de + +- updated to version 1.2.0: + * new ov_fopen() convenience call that avoids the common + stdio conflicts with ov_open() and MSVC runtimes. + * libvorbisfile now handles multiplexed streams + * improve robustness to corrupt input streams + * fix a minor encoder bug + * updated RTP draft + * build system updates + * minor corrections to the specification + +------------------------------------------------------------------- +Fri Jul 27 12:56:43 CEST 2007 - tiwai@suse.de + +- fix the documentation link (#293784) +- split documentation to doc subpackage +- remove -fno-strict-aliasing gcc option + +------------------------------------------------------------------- +Mon Jul 9 10:48:33 CEST 2007 - tiwai@suse.de + +- fix array boundary conditional flaw in mapping (#287124, + CVE-2007-3106) + +------------------------------------------------------------------- +Mon Apr 23 18:06:06 CEST 2007 - tiwai@suse.de + +- use aoTuV beta5 patch: + * The action of noise normalization has been improved. + * The threshold of a stereo mode change was calculated + dynamically. + * Noise control of an impulse block was changed (quality 0-10 + / 32-48kHz). And pre-echo decreased slightly. + * Tuning of each part was redone according to above-mentioned + changed part and additional part. + +------------------------------------------------------------------- +Mon Apr 16 15:07:19 CEST 2007 - tiwai@suse.de + +- follow library packaging policy + * move docs to devel package + * remove static library +- remove obsolete m4 files + +------------------------------------------------------------------- +Wed Jan 25 21:37:47 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Wed Jan 11 16:46:46 CET 2006 - tiwai@suse.de + +- compile with -fstack-protector. + +------------------------------------------------------------------- +Fri Dec 2 16:03:48 CET 2005 - tiwai@suse.de + +- updated to version 1.1.2. + +------------------------------------------------------------------- +Tue Oct 18 12:25:20 CEST 2005 - tiwai@suse.de + +- updated to version 1.1.1. + +------------------------------------------------------------------- +Sun Sep 4 06:45:34 CEST 2005 - aj@suse.de + +- Build with -fno-strict-aliasing (#115135). + +------------------------------------------------------------------- +Thu Jul 7 16:20:14 CEST 2005 - tiwai@suse.de + +- remove -fsigned-char (#93878). +- fixed Requires of devel subpackage. + +------------------------------------------------------------------- +Mon Jun 20 20:56:55 CEST 2005 - tiwai@suse.de + +- updated to aoTuV beta4. + +------------------------------------------------------------------- +Wed Jan 19 15:42:01 CET 2005 - tiwai@suse.de + +- fixed compile warnings with gcc-4.0. + +------------------------------------------------------------------- +Wed Nov 24 17:32:19 CET 2004 - tiwai@suse.de + +- updated to libvorbis version 1.1.0. +- updated to aoTuV beta3. + +------------------------------------------------------------------- +Thu Aug 5 13:03:24 CEST 2004 - tiwai@suse.de + +- applied aoTuV patch to improve the encoding quality. + +------------------------------------------------------------------- +Fri Apr 16 12:54:41 CEST 2004 - tiwai@suse.de + +- fixed the type-punning. +- disabled the removal of $RPM_BUILD_ROOT in %install. + +------------------------------------------------------------------- +Wed Jan 21 18:45:51 CET 2004 - tiwai@suse.de + +- fixed quoting in m4 files. + +------------------------------------------------------------------- +Fri Jan 9 17:47:41 CET 2004 - adrian@suse.de + +- add %run_ldconfig to %postun + +------------------------------------------------------------------- +Fri Jan 9 17:01:18 CET 2004 - tiwai@suse.de + +- updated to version 1.0.1. + removed obsolete patches. +- added pkgconfig to neededforbuild. + +------------------------------------------------------------------- +Sat Mar 1 18:04:02 CET 2003 - adrian@suse.de + +- let libvorbis-devel require libogg-devel + +------------------------------------------------------------------- +Fri Jan 17 17:24:33 CET 2003 - tiwai@suse.de + +- fixed m4 macro (bug #21267). + +------------------------------------------------------------------- +Thu Jan 9 18:17:59 CET 2003 - kukuk@suse.de + +- Add *.la files to -devel filelist + +------------------------------------------------------------------- +Wed Dec 4 18:14:02 CET 2002 - tiwai@suse.de + +- fixed the undefined weak links. +- renamed m4.dif and lib64.dif with libvorbis- prefix to avoid + filename conflictions. + +------------------------------------------------------------------- +Thu Sep 19 15:41:52 CEST 2002 - tiwai@suse.de + +- don't add -I/usr/include to VORBIS_VFLAGS. +- fix test for prefix. +- move devel documents under %{_docdir}/libvorbis-devel. + +------------------------------------------------------------------- +Mon Aug 12 13:40:58 CEST 2002 - tiwai@suse.de + +- added Requires %{name} = %{version} to devel package. + +------------------------------------------------------------------- +Tue Jul 23 16:49:20 CEST 2002 - tiwai@suse.de + +- fixed m4 file for lib64. +- provides the backward compatible m4 file. + +------------------------------------------------------------------- +Mon Jul 22 10:46:19 CEST 2002 - tiwai@suse.de + +- updated to version 1.0. +- clean up the spec file. +- added %run_ldconfig. + +------------------------------------------------------------------- +Wed Jun 12 13:20:32 CEST 2002 - meissner@suse.de + +- rm acinclude.m4 so we don't have the problematic ogg.m4 (which contains + /lib hardcoded). + +------------------------------------------------------------------- +Thu Apr 18 11:57:17 CEST 2002 - kukuk@suse.de + +- Remove additional optimization, default is better +- Add --libdir to configure to build on x86_64 + +------------------------------------------------------------------- +Thu Feb 7 11:21:43 CET 2002 - tiwai@suse.de + +- fixed build on s390x. + +------------------------------------------------------------------- +Fri Jan 4 11:54:44 CET 2002 - tiwai@suse.de + +- updated to RC3. + sync with cvs 2002.01.04. + +------------------------------------------------------------------- +Tue Dec 4 11:24:07 CET 2001 - tiwai@suse.de + +- sync with cvs 2001.12.04. + +------------------------------------------------------------------- +Wed Oct 24 17:50:32 CEST 2001 - tiwai@suse.de + +- sync with cvs 20011024. + + fixed/updated documents + + tuned up parameters + + bugfixes on 64bit arch. +- removed Requires to libogg. + +------------------------------------------------------------------- +Sat Oct 20 16:45:55 CEST 2001 - schwab@suse.de + +- Fix use of qsort. + +------------------------------------------------------------------- +Mon Aug 13 16:57:27 CEST 2001 - tiwai@suse.de + +- updated to 1.0rc2 from cvs 20010813. + +------------------------------------------------------------------- +Thu Jun 7 11:26:12 CEST 2001 - tiwai@suse.de + +- fixed build with the recent libtool. + +------------------------------------------------------------------- +Tue Apr 3 08:52:17 MEST 2001 - bk@suse.de + +- make use of RPM_OPT_FLAGS +- include the include/vorbis dir into the file list(+rpm-macroized) + +------------------------------------------------------------------- +Mon Mar 12 15:22:00 CET 2001 - tiwai@suse.de + +- corrected copyright in spec file. + +------------------------------------------------------------------- +Mon Feb 26 17:10:04 CET 2001 - tiwai@suse.de + +- Updated to 1.0beta4. + +------------------------------------------------------------------- +Wed Jan 31 12:29:54 CET 2001 - tiwai@suse.de + +- Initial version: 1.0beta3. + diff --git a/libvorbis.keyring b/libvorbis.keyring new file mode 100644 index 0000000..859ca3e --- /dev/null +++ b/libvorbis.keyring @@ -0,0 +1,51 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFsCSDYBEADM27aZ5YfexsnbrsvQ8sdZtUM2afJptN2BEujqvzPN8vR8yIaO +ScfhCPOHI1CYyevT0SVpeoNDW5JIJD5YbpT87PXbi2Ia/zRo8pIOdUqlL4HUtEoc +dTt1ihlmM/3seqvlkEJnnlhVhE6Oz8yy20yjYcNDtgHhirYrV240XRiPflEt0jsd +LHgYtsyEiktRTITX9Dr3V9Pr2W22qd2zFAkdc5G+wo0TiaDXRYC0siOzoV5VbR47 +lT7juRD5aO+TDxc4Azs9GJQtrUFpF1rtnQvn/+aXX7uj4mBu8jdoSSCZb9mm3mbE +Sb2QUTzP0gBal6bcPoghpZcCRQ/rtlkMaYnGMe5qBe5x3iPhbPrPNF0kfbj+Jx79 +6LygakyLbnINIZyJ7tjTSyruXkWsVkI6YuMa6ld3ejc6bak1WWXS/B5WDq36gBlB +W1QJi0qrMMXFr/AntXQYqudqnZeRJS11CxCy7onh8oR6+QQXs3Ec+fw8uLSEUL/j +iu5nEl6OofmUVvQsPUKzjMFpOmpA6T+JD5RbpgSUP+hrZW/q3JwcON9inYsJvWBJ +3DX9rLSs4pHlW5NzjXBiLGLDZOZszDYZVBkZ5xj+7vWNxBOu32ehUQFMbBkQsAuD +NX45RfsaFxO7pWoV8/oXKrbhn3wwh5GzRi5aGvN8qUuWCvXHCGlgkbBKkwARAQAB +tB9SYWxwaCBHaWxlcyA8Z2lsZXNAdGhhdW1hcy5uZXQ+iQI9BBMBCgAnBQJbAkg2 +AhsDBQkFo5qABQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEJJZqPLS1EyEzvEP +/1ELKFTm7CKGPMhInqwImHg47w2by42zuqhmWkfi+yO4NnRCAxpXk38aIbWG4ToN +TVACJY7o2Nt7iTsNfuXNiP8L5xBoaeimFXCtoY+Bl3frW6eDwg1XHCzqsrblsYSi +sNN7xiYpUngJdJ9//ij1T6rWIiQwQZxZeHSE08hduNDIvmup9E1xjLtV3KMUB97z +TDcQrBoQOD+ztxGQrtQTpf1hqhmfe94QJlYYmqZHPl2f77qA05nGhuXZvqhD6uEg +XhoRf0a1MHgQ3XMNEXILjb+Tq6ed/GbTUiYdVc9Dzqs+1H0Ozazc2Y3BWslZlE7c +GtdkAWLqBGlFtnyLELEKluR9zi3KTkhwS1cVrA3IB23D+PfzKehfpPSCgRvyU86o +qG5M6deVkPKzbf/lHBTFrG7mUHdgFP67i7ia77jNaN65Jx53vRfbbdjB8UllhbvQ +DfFTywrrdcG0OxnIhlJO22ZvXTJrcMU5AWkgLqTDvnFoefYYK9C2ht8g45Gh+jYG +6SGkgqE0Xl+PYKJfDfZQDAn4xIfRaZyqr8gVT2T/w/LkHLeG/jjDOeISJofRNFqg +lGtHWUtIw+CGOw82UjlSUn9pKKyyimaUNmtRt9cC8voyI5VEWdP345yRC8PNucWs +v2EeWK9bxB6XVP9TEITzTSANxlMNffVbTubCkU221FruuQINBFsCSDYBEACXU7rJ +mnTi7MfJcltrbhctLpbFFeDZn+T7z3T6JnZw9GV/iRYeGrwhNptUg66ffhIC2nBg +mcNQ67olB4vRdDCqA02+rMTySXFhBj4VX/7EECmw14D84cZR+BoIrLDxzfBUux9j +7BlX2bBiQ79VSwng9uCipZj49fWNAm0RnZ/P8LDATUb3i4f/o0qD1Gm39VcRSQdI +La/FpwTKB/B0ToUH5/i0TlWNiRziB/nlM00x5BUqRP8QrQVszsyKlYy5T0eR8MEV +uw0LuQx2qroRh8CTZdWRRBTtcWCFb5cfqZWdUgu0sF/dMIcwBvcnma/aVgF62EdC +CgrMmRqd/IFrmbPZXq7VRCGkEaxHjs41ahRHk51bKwcuGqHw0UQsbv+dcMURvl13 +rQulOkwe+1QILspQ/foqugMoWDqcPEBHG+ovfjzSoB5MIEkyJjfeyPXjlYTA+tbm +lw5c6tLQMRlYA5hhc0BYNFYSrx/oAtUg05hz31v2d8UCSZS/wHAh3DzMJgwMj5N+ +IZ8iOQNYISQCBASQEhLQk+J0smGmxUx+uvGJvxdo6g5WnIsztcLMOpqUMiy3jfOw +LojIClAUIYoHXLEN8D6oaKJ3EdpOANBb/0Ro7JPPC0wrQZE8+rlCu0EhH/Xt8aMC +HeHkF+rxC0Nu/JACPFLELWAlrYKY79cHJAAPmwARAQABiQIlBBgBCgAPBQJbAkg2 +AhsMBQkFo5qAAAoJEJJZqPLS1EyEBtwP/3njDZm35BC1HMPn1ToJwNR1Qtd4Puup +jNNHcHf1v9UQUvRg0dsOY5qmL+GBj3zgRAQ7LP3xbXu0e0/Cwucdv6hf8/6P641w +LwCAGkfshiAxnSCEHLDEdad0wcXM5DDIdqJMR5lWWoo+ln91+AGXgPuWRPcJE56l +INLaZX3cgYKriYdphCcMyMgtHzyKkDwSMGKundtxFx9Gdg57hGEZTYfd9XqWMZwD +2jcfvk9ASJqy4y+k9oc+M/3m40F8Qua26Gfdp8e3d+R/Y1QzKtO8fhoUi0aT8f0X +zBG7Y89actCAO4Hr6z1qEpGbQb3fbqmaaI7uxgUj5+ApUbdtw4581QKGDGp95GMC +Ca1LZ47qhlvr5vkrUU+204qS/i2LurzUPqo7qBiCUCgAERx+kQzBRlziTIkWc6Wt +W2bxugxYEx05yrNdwoxO8PkDF+v4Yv8abL7XBAZgbVvEgPiONducLWnj4h27fGhN +Mj6Y2qK9bsxobAUJtjWw2r/LuS8CgOnRX6mYdVZw5+0BgFc1BKI1GtW0n4eR2gUj +OU3LkzNoSFbl3HTnHYz4SwM62Na50HglKUfoXp0HiL0dxsQEj71WSVtBjNUxfUMk +OfnAbwDUbpDIe68DSCVNLVw6dJZANqW/77vvN17AuX0O0Jt1/bmenv8CDmR0NP/B +ziJMnjt238S8 +=MNJb +-----END PGP PUBLIC KEY BLOCK----- diff --git a/libvorbis.spec b/libvorbis.spec new file mode 100644 index 0000000..ab755b3 --- /dev/null +++ b/libvorbis.spec @@ -0,0 +1,149 @@ +# +# spec file for package libvorbis +# +# Copyright (c) 2023 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: libvorbis +Version: 1.3.7 +Release: 0 +Summary: The Vorbis General Audio Compression Codec +License: BSD-3-Clause +Group: System/Libraries +URL: http://www.vorbis.com/ +Source: https://downloads.xiph.org/releases/vorbis/%{name}-%{version}.tar.xz +Source1: https://downloads.xiph.org/releases/vorbis/libvorbis-%{version}.tar.xz.asc +Source10: baselibs.conf +Source99: libvorbis.keyring +Patch1: libvorbis-lib64.dif +Patch2: libvorbis-m4.dif +Patch12: vorbis-ocloexec.patch +BuildRequires: libogg-devel +BuildRequires: libtool +BuildRequires: pkgconfig +BuildRequires: xz +%{?suse_build_hwcaps_libs} + +%description +Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and +general-purpose compressed audio format for audio and music at fixed +and variable bit rates from 16 to 128 kbps/channel. + +The native bitstream format of Vorbis is libogg (Ogg). Alternatively, +libmatroska (matroska) can also be used. + +%package -n libvorbis0 +Summary: The Vorbis General Audio Compression Codec +Group: System/Libraries + +%description -n libvorbis0 +Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and +general-purpose compressed audio format for audio and music at fixed +and variable bit rates from 16 to 128 kbps/channel. + +The native bitstream format of Vorbis is libogg (Ogg). Alternatively, +libmatroska (matroska) can also be used. + +%package -n libvorbisenc2 +Summary: The Vorbis General Audio Compression Codec +Group: System/Libraries + +%description -n libvorbisenc2 +Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and +general-purpose compressed audio format for audio and music at fixed +and variable bit rates from 16 to 128 kbps/channel. + +The native bitstream format of Vorbis is libogg (Ogg). Alternatively, +libmatroska (matroska) can also be used. + +%package -n libvorbisfile3 +Summary: The Vorbis General Audio Compression Codec +Group: System/Libraries + +%description -n libvorbisfile3 +Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and +general-purpose compressed audio format for audio and music at fixed +and variable bit rates from 16 to 128 kbps/channel. + +The native bitstream format of Vorbis is libogg (Ogg). Alternatively, +libmatroska (matroska) can also be used. + +%package devel +Summary: Include Files and Libraries mandatory for Ogg Vorbis Development +Group: Development/Libraries/C and C++ +Requires: glibc-devel +Requires: libogg-devel +Requires: libvorbis0 = %{version} +Requires: libvorbisenc2 = %{version} +Requires: libvorbisfile3 = %{version} + +%description devel +This package contains all necessary include files and libraries needed +to compile and develop applications that use libvorbis. + +%prep +%setup -q +%patch2 +# %%patch5 -p1 +if [ "%{_lib}" == "lib64" ]; then +%patch1 +fi +%patch12 + +%build +# Fix optimization level +sed -i s,-O20,-O3,g configure.ac + +autoreconf -fiv +%configure \ + --disable-examples \ + --disable-static +%make_build + +%install +%make_install +# docs are built in a separate spec file +rm -rf %{buildroot}%{_datadir}/doc/* +# remove unneeded files +find %{buildroot} -type f -name "*.la" -delete -print + +%check +%make_build check + +%post -n libvorbis0 -p /sbin/ldconfig +%postun -n libvorbis0 -p /sbin/ldconfig +%post -n libvorbisenc2 -p /sbin/ldconfig +%postun -n libvorbisenc2 -p /sbin/ldconfig +%post -n libvorbisfile3 -p /sbin/ldconfig +%postun -n libvorbisfile3 -p /sbin/ldconfig + +%files -n libvorbis0 +%{_libdir}/libvorbis.so.0* + +%files -n libvorbisenc2 +%{_libdir}/libvorbisenc.so.2* + +%files -n libvorbisfile3 +%{_libdir}/libvorbisfile.so.3* + +%files devel +%doc AUTHORS +%license COPYING +%{_datadir}/aclocal/*.m4 +%{_includedir}/vorbis +%{_libdir}/lib*.so +%{_libdir}/pkgconfig/*.pc + +%changelog diff --git a/vorbis-ocloexec.patch b/vorbis-ocloexec.patch new file mode 100644 index 0000000..e3d6cd8 --- /dev/null +++ b/vorbis-ocloexec.patch @@ -0,0 +1,82 @@ +--- lib/analysis.c.orig ++++ lib/analysis.c +@@ -73,7 +73,7 @@ void _analysis_output_always(char *base, + char buffer[80]; + + sprintf(buffer,"%s_%d.m",base,i); +- of=fopen(buffer,"w"); ++ of=fopen(buffer,"we"); + + if(!of)perror("failed to open data dump file"); + +--- lib/floor1.c.orig ++++ lib/floor1.c +@@ -899,7 +899,7 @@ int floor1_encode(oggpack_buffer *opb,vo + char buffer[80]; + sprintf(buffer,"line_%dx%ld_class%d.vqd", + vb->pcmend/2,posts-2,class); +- of=fopen(buffer,"a"); ++ of=fopen(buffer,"ae"); + fprintf(of,"%d\n",cval); + fclose(of); + } +@@ -923,7 +923,7 @@ int floor1_encode(oggpack_buffer *opb,vo + char buffer[80]; + sprintf(buffer,"line_%dx%ld_%dsub%d.vqd", + vb->pcmend/2,posts-2,class,bookas[k]); +- of=fopen(buffer,"a"); ++ of=fopen(buffer,"ae"); + fprintf(of,"%d\n",out[j+k]); + fclose(of); + } +--- lib/psytune.c.orig ++++ lib/psytune.c +@@ -202,7 +202,7 @@ void analysis(char *base,int i,float *v, + FILE *of; + char buffer[80]; + sprintf(buffer,"%s_%d.m",base,i); +- of=fopen(buffer,"w"); ++ of=fopen(buffer,"we"); + + for(j=0;jsubmap,j,k); +- of=fopen(buffer,"a"); ++ of=fopen(buffer,"ae"); + + for(l=0;lentries;l++) + fprintf(of,"%d:%ld\n",l,look->training_data[k][j][l]); +@@ -462,7 +462,7 @@ static long **_01class(vorbis_block *vb, + + for(i=0;itrain_seq); +- of=fopen(buffer,"a"); ++ of=fopen(buffer,"ae"); + for(j=0;jtrain_seq); +- of=fopen(buffer,"a"); ++ of=fopen(buffer,"ae"); + for(i=0;i