gstreamer1-plugins-good/gstreamer1-plugins-good.spec
wangshuo 3552c65225 Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed
(cherry picked from commit 77ba8c995d89d039bf04df866594c0a0395b8bdc)
2025-04-23 10:17:31 +08:00

183 lines
6.7 KiB
RPMSpec

%bcond_with extras
%bcond_with qt
Name: gstreamer1-plugins-good
Version: 1.16.2
Release: 9
Summary: GStreamer plugins with good code and licensing
License: LGPLv2+
URL: http://gstreamer.freedesktop.org/
Source0: http://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-%{version}.tar.xz
Source1: gstreamer-good.appdata.xml
#https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/issues/858
Patch6000: backport-CVE-2021-3497-matroskademux-Initialize-track-context-out-parameter.patch
#https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/issues/859
Patch6001: backport-CVE-2021-3498-matroskademux-Fix-extraction-of-multichannel-WavPack.patch
#https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226
Patch6002: CVE-2022-1920.patch
#https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224
Patch6003: CVE-2022-1921.patch
#https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225
Patch0004: CVE-2022-2122.patch
#https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225
Patch0005: CVE-2022-1922_CVE-2022-1923_CVE-2022-1924_CVE-2022-1925.patch
#https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/4894.patch
Patch0006: CVE-2023-37327.patch
Patch0007: CVE-2024-47606.patch
Patch0008: CVE-2024-47613.patch
Patch0009: CVE-2024-47775_CVE-2024-47776_CVE-2024-47777_CVE-2024-47778.patch
Patch0010: CVE-2024-47774.patch
Patch0011: CVE-2024-47540.patch
Patch0012: CVE-2024-47602.patch
Patch0013: CVE-2024-47601-1.patch
Patch0014: CVE-2024-47601-2.patch
Patch0015: CVE-2024-47834.patch
Patch0016: CVE-2024-47537.patch
Patch0017: CVE-2024-47597-1.patch
Patch0018: CVE-2024-47597-2.patch
Patch0019: CVE-2024-47543.patch
Patch0020: CVE-2024-47596.patch
Patch0021: CVE-2024-47539.patch
Patch0022: CVE-2024-47546.patch
Patch0023: matroskademux-Fix-off-by-one-when-parsing-multi-channel-WavPack.patch
Patch0024: qtdemux-Do-not-iterate-over-all-trun-entries-if-none.patch
Patch0025: qtdemux-Fix-debug-output-during-trun-parsing.patch
Patch0026: CVE-2024-47599.patch
Patch0027: CVE-2024-47603.patch
Patch0028: CVE-2024-47545-pre1.patch
Patch0029: CVE-2024-47545-pre2.patch
Patch0030: CVE-2024-47545.patch
Patch0031: CVE-2024-47544.patch
BuildRequires: gcc gcc-c++ gstreamer1-devel gstreamer1-plugins-base-devel flac-devel
BuildRequires: gdk-pixbuf2-devel libjpeg-devel libpng-devel libshout-devel orc-devel
BuildRequires: libsoup-devel libX11-devel libXext-devel libXdamage-devel libXfixes-devel
BuildRequires: pulseaudio-libs-devel speex-devel taglib-devel wavpack-devel libv4l-devel
BuildRequires: libvpx-devel gtk3-devel mesa-libGL-devel libglvnd-devel lame-devel
BuildRequires: mesa-libEGL-devel mesa-libGLU-devel mpg123-devel twolame-devel libdv-devel
BuildRequires: libavc1394-devel libiec61883-devel libraw1394-devel gtk-doc
BuildRequires: chrpath
Provides: gstreamer1-plugins-mpg123 = %{version}-%{release}
Obsoletes: gstreamer1-plugins-mpg123 < %{version}-%{release}
%description
GStreamer is a streaming media framework, based on graphs of filters which
operate on media data. Applications using this library can do anything
from real-time sound processing to playing videos, and just about anything
else media-related. Its plugin-based architecture means that new data
types or processing capabilities can be added simply by installing new
plugins.
GStreamer Good Plugins is a collection of well-supported plugins of
good quality and under the LGPL license.
%package gtk
Summary: gtk plugin for gstreamer1-plugins-good
Requires: %{name} = %{version}-%{release}
Provides: gstreamer1-plugins-bad-free-gtk = %{version}-%{release}
Obsoletes: gstreamer1-plugins-bad-free-gtk < %{version}-%{release}
%description gtk
GStreamer is a streaming media framework, based on graphs of elements which
operate on media data.
GStreamer Good Plugins is a collection of well-supported plugins of
good quality and under the LGPL license.
%package_help
%prep
%autosetup -n gst-plugins-good-%{version} -p1
%build
%configure --disable-silent-rules --disable-fatal-warnings --enable-experimental \
--enable-gtk-doc --enable-orc --disable-monoscope --disable-aalib \
--disable-cairo --disable-libcaca --disable-jack \
--with-default-visualizer=autoaudiosink
%make_build
%install
%make_install
%delete_la_and_a
install -p -D %{SOURCE1} %{buildroot}%{_metainfodir}/gstreamer-good.appdata.xml
chrpath -d %{buildroot}%{_libdir}/gstreamer-1.0/libgstshout2.so
mkdir -p %{buildroot}/etc/ld.so.conf.d
echo "%{_libdir}" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
%ldconfig_scriptlets
%files
%defattr(-,root,root)
%doc AUTHORS
%license COPYING
%{_libdir}/gstreamer-1.0/*.so
%{_datadir}/locale/*
%dir %{_datadir}/gstreamer-1.0/presets
%{_datadir}/gstreamer-1.0/presets/*.prs
%{_metainfodir}/gstreamer-good.appdata.xml
%exclude %{_libdir}/gstreamer-1.0/libgstgtk.so
%config(noreplace) /etc/ld.so.conf.d/*
%files gtk
%defattr(-,root,root)
%{_libdir}/gstreamer-1.0/libgstgtk.so
%files help
%defattr(-,root,root)
%doc README REQUIREMENTS
%doc %{_datadir}/gtk-doc/html/*
%changelog
* Mon Apr 21 2025 wangshuo <wangshuo@kylinos.cn> - 1.16.2-9
- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed
* Fri Dec 20 2024 yaoxin <yao_xin001@hoperun.com> - 1.16.2-8
- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603
* Wed Dec 18 2024 yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
- Fix cves:
CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
CVE-2024-47546
* Fri Dec 15 2023 wangkai <13474090681@163.com> - 1.16.2-6
- Fix CVE-2023-37327
* Mon Jun 27 2022 yaoxin <yaoxin30@h-partners.com> - 1.16.2-5
- Fix CVE-2022-2122 CVE-2022-1920-to-CVE-2022-1925
* Fri Sep 10 2021 gaihuiying <gaihuiying1@huawei.com> - 1.16.2-4
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rpath of libgstshout2.so
* Mon Aug 16 2021 yanglu <yanglu72@huawei.com> - 1.16.2-3
- Type:cves
- ID:CVE-2021-3497 CVE-2021-3498
- SUG:NA
- DESC:fix CVE-2021-3497 CVE-2021-3498
* Thu Oct 29 2020 gaihuiying <gaihuiying1@huawei.com> - 1.16.2-2
- Type:requirement
- ID:NA
- SUG:NA
- DESC:remove python2
* Thu Aug 06 2020 yuboyun <yuboyun@huawei.com> - 1.16.2-1
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update to 1.16.2
* Fri Mar 6 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.14.4-3
- Package init