gstreamer-plugins-bad-1.20.1-150400.3.9.1

- Add gstreamer-plugins-bad-CVE-2023-40474.patch:
  Backporting ce17e968 from upstream, Fix integer overflow causing
  out of bounds writes when handling invalid uncompressed video.
  (CVE-2023-40474 bsc#1215796)

- Add gstreamer-plugins-bad-CVE-2023-44446.patch:
  Backporting 274551d4 from upstream, Store GstMXFDemuxEssenceTrack
  in their own fixed allocation.
  (CVE-2023-44446 bsc#1217213)

- Add gstreamer-plugins-bad-CVE-2023-40475.patch
  Backporting 72742dee from upstream, Check number of channels for
  AES3 audio.
  (CVE-2023-40475 bsc#1215792)

- Add gstreamer-plugins-bad-CVE-2023-44429.patch:
  Backporting 1db83d3f from upstream, Clip tile rows and cols to 64
  as describe in AV1 specification.
  (CVE-2023-44429 bsc#1217211)

- Add gstreamer-plugins-bad-CVE-2023-40474.patch:
  Backporting ce17e968 from upstream, Fix integer overflow causing
  out of bounds writes when handling invalid uncompressed video.
  (CVE-2023-40474 bsc#1215796)

- Add gstreamer-plugins-bad-CVE-2023-40476.patch:
  Backporting ff91a3d8 from upstream, Fix possible overflow using
  max_sub_layers_minus1.
  (CVE-2023-40476 bsc#1215793)

- Add gstreamer-plugins-bad-CVE-2023-37329.patch:
  Backport 7ed446dc,0dabf0eb from upstream, Fix a heap overwrite
  in PGS subtitle overlay decoder which might trigger a crash or
  remote code execution.
  (CVE-2023-37329 bsc#1213126)

- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch

- Add gstreamer-plugins-bad-CVE-2023-40476.patch:
  Backporting ff91a3d8 from upstream, Fix possible overflow using
  max_sub_layers_minus1.
  (CVE-2023-40476 bsc#1215793)

- Add 0001-dvdspu-Make-sure-enough-data-is-allocated-for-the.patch:
  from upstream to fix a heap overwrite in PGS subtitle
  overlay decoder which might trigger a crash or remote code
  execution (CVE-2023-37329 bsc#1213126).

- Add 8440e2a373e5ce681d15f5880cb2f2562be332cf.patch:
  nvh264dec,nvh265dec: Fix broken key-unit trick and reverse
  playback.
- Quiet setup, we do not need to see the unpacking of the tarball.

- Add patch to support building with srt 1.3.4 in SLE
  * fix-build-with-srt-1.3.4.patch
- Do not build the gstldac plugin in s390x where
  pkgconfig(ldacBT-enc) is not available.

- Update to version 1.20.1:
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + av1parse: let the parser continue on verbose OBUs
  + d3d11converter: Fix RGB to GRAY conversion, broken debug
    messages, and add missing GRAY conversion
  + gs: look for google_cloud_cpp_storage.pc
  + ipcpipeline: fix crash and error on windows with SOCKET or
    _pipe()
  + ivfparse: Don't set zero resolution on caps
  + mpegtsdemux: Handle PES headers bigger than a mpeg-ts packet;
    fix locking in error code path; handle more program updates
  + mpegtsmux: Start last_ts with GST_CLOCK_TIME_NONE to fix VBR
    muxing behaviour
  + mpegtsmux: Thread safety fixes: lock mux->tsmux, the programs
    hash table, and pad streams
  + mpegtsmux: Skip empty buffers
  + osxaudiodeviceprovider: Add initial support for duplex devices
    on OSX
  + rtpldacpay: Fix missing payload information
  + sdpdemux: add media attributes to caps, fixes ptp clock
    handling
  + mfaudioenc: Handle empty IMFMediaBuffer
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + nvenc: Fix deadlock because of too strict buffer pool size
  + va: fix library build issues, caps leaks in the vpp transform
    function, and add vaav1dec to documentation
  + v4l2codecs: vp9: Minor fixes
  + v4l2codecs: h264: Correct scaling matrix ABI check
  + dtlstransport: Notify ICE transport property changes
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + webrtc-ice: Fix memory leaks in gst_webrtc_ice_add_candidate()
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
- Drop patch already included upstream:
  + 1634.patch

- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Add explicit pkgconfig(libva) BuildRequires: meson checks for it.
- Go back to using tarball from upstream, remove service.
- Drop 2564.patch: Fixed upstream.
- Add disabled pkgconfig(storage_client) and
  pkgconfig(webrtc-audio-coding-1) BuildRequires and pass
  gs=disabled, isac=disabled and onnx=disabled to meson, we do not
  have the dependencies in openSUSE yet.
- Add explicit BuildRequires:  pkgconfig(libsoup-2.4), meson checks
  for it.
- Add pkgconfig(json-glib-1.0), pkgconfig(ldacBT-enc) and
  pkgconfig(libqrencode) BuildRequires, new dependencies.
- Add pkgconfig(libopenaptx) BuildRequires in build_orig section
  and pass openaptx=disabled to meson, do not build this in distro
  by default.
- Drop mms and ofa plugins, removed upstream. Drop
  pkgconfig(libmms) and pkgconfig(libofa) BuildRequires following
  the removal.
- Add new sub-packages libgstplay-1_0-0, typelib-1_0-GstPlay-1_0
  and libgstva-1_0-0, also add libgstva-1_0-0 and libgstplay-1_0-0
  to baselibs.conf.
- Tweak/fix and drop some Obsoletes.
- Drop old conditionals for versions of openSUSE out of support.
- Add 1634.patch -- AV1 playback fixes.
- Use ldconfig_scriptlets macro for post(un) handling.
- Drop explicit gstreamer-devel Requires from devel sub-package,
  not needed as this is added via pkgconfig any way.

- Update to version 1.18.6:
  + interlace: Fix a double-unref on shutdown
  + webrtcbin: Chain up to parent constructed method
  + webrtc: fix log error message in function
    gst_webrtc_bin_set_local_description
  + mxfdemux: don't error out if VANC track only contains packets
    we don't handle
  + av1parser: Fix data type of film grain param
  + assrender: Support RFC8081 mime types
  + pitch: Specify layout as required for negotiation
  + magicleap: update lumin_rt libraries names to the latest
    official version
  + codecs: h265decoder: Fix per-slice leak
  + mpeg4videoparse: fix criticals trying to insert configs that
    don't exist yet
  + webrtcbin: Always set SINK/SRC flags
  + mpegtspacketizer: memcmp potentially seen_before data
  + zxing: update to support version 1.1.1
- Drop service, use source url, upstream changes in git.

- Go back to using pkgconfig(fdk-aac) BuildRequires.

- Add some conditionals to build as many plugins as possible
  in SLE-15-SP4 and move all conditional logic to the beginning
  of the spec file using bcond_with/without.

- Drop conditionals for fdk_aac, explicitly add fdk-aac-free-devel
  BuildRequires, and build it for the main package.

- Add 2564.patch: Allow to build against Neon 0.32.x.

- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull, further pass doc=disabled to meson.

- Update to version 1.18.5:
  + audiolatency:
  - Use live mode audiotestsrc
  - Handle audio buffers with invalid duration
  + ccconverter: fix framerate caps negotiation from non-cdp to cdp
  + dashdemux:
  - Properly initalize GError, remove duplicate logging call
  - Log protection events on corresponding pad
  - Fix dash_mpdparser_check_mpd_client_set_methods unit test
  + h264parse,h265parse: Push parameter set NAL units again per
    segment-done
  + h265parse:
  - Fix a typo in get_compatible_profile_caps()
  - Don't invalidate the last PPS when parsing a new SPS
  + h264parse: improve PPS handling
  + h2645parser: Catch overflows in AVC/HEVC NAL unit length
    calculations
  + interlace:
  - Don't set field-order field for progressive caps, fixes
    negotiation issues
  - Fix too small buffer size error
  + jpegparse: Don't generate timestamp for 0/1 framerates
  + opencv: fix build error on macOS
  + openexr: Fix build with OpenEXR 3
  + openh264enc: fix broken sps/pps header generation and some
    minor leaks
  + mpeg2enc:
  - Fix interlace-mode detection on input video
  - Only allow 1 pending frame for encoding (fixes unbound memory
    usage in case encoder can't keep up with input)
  + mfvideoenc: Don't pass 0/1 framerate to MFT
  + mfvideosrc:
  - Fix for negative MF stride
  - Fix negotiation when interlace-mode is specified
  + mxfvanc: Handle empty ANC essence
  + rtmp2src: workaround a GLib race when destroying a
    GMainContext/GSource
  + rtpsrc: Plug leak of rtcp_send_addr and fix setting URI back to
    NULL
  + rtpsink: Return proper pad from _request_new_pad()
  + rist: Plug leak of rtcp_send_addr
  + rtmp2: Use correct size of write macro for param2
  + rtmp2/connection: Separate inner from outer cancelling
  + tsmux:
  - When selecting random PIDs, name the pads according to those
    PIDs
  - Recheck existing pad PIDs when requesting a new pad with a
    random pid
  + tsdemux:
  - Fix seek with stop regression
  - Clear all streams when rewinding, fixes the case where the
    demuxer sends out partial invalid data downstream after a
    seek which causes some decoders (such as dvdlpmdec) to error
    out
  + v4l2slh264dec: Fix slice header bit size calculation
  + videoparseutils: Fix for wrong CEA708 minimum size check
  + waylandsink: Fix for missing initial configure
  + wpe: Make threaded view singleton creation thread safe
  + x265: Fix a deadlock when failing to create the x265enc
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
- Drop gstreamer-plugins-bad-openexr3.patch: Fixed upstream.
- No longer pass nvdec=disabled, nvenc=disabled and vdpau=disabled
  to meson, no longer needed, nor recognized.

- don't own appdata dir - is provided by filesystem

- added patches
  fix https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/issues/1574
  + gstreamer-plugins-bad-openexr3.patch

- Update to version 1.18.4:
  + avwait: Don't post messages with the mutex locked
  + d3d11h264dec: Reconfigure decoder object on DPB size change
    and keep track of actually configured DPB size
  + dashsink: fix double unref of sinkpad caps
  + decklinkvideosink: Use correct numerator for 29.97fps
  + decklinkvideosink: fix auto format detection
  + decklinksrc: Use a more accurate capture time
  + d3d11videosink: Fix build error on UWP
  + interlace: negotiation and buffer leak fixes
  + mpegvideoparse: do not clip, so decoder receives data from
    keyframe even if it's before the segment start
  + mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  + nvh264sldec: Reopen decoder object if larger DPB size is
    required
  + sdpsrc: fix double free if sdp is provided as string via the
    property
  + vulkan: Fix elements long name.

- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)

- Update to version 1.18.3:
  + assrender: fix mutex handling in certain flushing/error
    situations
  + dvbsuboverlay: Add support for dynamic resolution update
  + dashsink: fix critical log of dynamic pipeline
  + d3d11shader: Fix ID3DBlob object leak
  + d3d11videosink: Prepare window once streaming started
  + decklinkaudiosrc: Fix duration of the first audio frame after
    each discont
  + intervideosrc: fix negotiation of interlaced caps
  + msdk:
  - Needn't close mfx session when failed, fixes double free /
    potential crash
  - Check GstMsdkContext instead of mfxSession instance
  + srt: fix locking when retrieving stats
  + rtmp2src: fix leaks when connection is cancelled during startup
    or connection fails

- Drop GPL-2.0-or-later from license tag, upstream moved to
  LGPL-2.1-or-later only starting from version 1.18.1. See commit
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/1682

- Update to version 1.18.2:
  + tsparse: timestamp packetized buffers, fixing timestamp
    handling regression in connection with dvbsrc in MeTV
  + ttmlparse: fix issues in aggregation of input TTML
  + mpegdemux: Set duration on seeking query if possible, fixes
    seeking in MPEG-PS streams in gst-play-1.0
  + mpegtsdemux: Fix off by one error
  + adaptivedemux:
  - Store QoS values on the element
  - Don't calculate bitrate for header/index fragments
  + hlsdemux: Don't double-free variant streams on errors
  + mpegtspacketizer: Handle PCR issues with adaptive streams
  + player: call ref_sink on pipeline
  + vkdeviceprovider: Avoid deadlock on physical device
  + wlvideoformat: fix DMA format convertor
  + Webrtc shutdown crashes
  + decklink:
  - Update enum value bounds check in gst_decklink_get_mode()
  - Correct framerate 2KDCI 23.98
  + amc: Fix crash when encoding AVC
  + d3d11videoprocessor: Fix wrong input/output supportability
    check
  + opencv: allow compilation against 4.5.x
  + tests: svthevcenc: Fix test_encode_simple
  + tests: dtls: Don't set dtlsenc state before linking
  + mpegtsmux: Restore intervals when creating TsMux
  + adaptivedemux, hlsdemux, curl: Use actual object for logging
  + gi: player: Fix get_current_subtitle_track() annotation
- Fix the _service file and spec to really use the tarball
  generated by service.

- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-bad changes:
  - codecparsers: h264parser: guard against ref_pic_markings
    overflow
  - v4l2codecs: Various fixes
  - h265parse: Don't enable passthrough by default
  - srt: Fix "Fix timestamping"
  - srt: Fixes for 1.4.2
  - dtlsconnection: Ignore OpenSSL system call errors
  - h265parse: set interlace-mode=interleaved on interlaced
    content
  - Replace GPL v2 with LGPL v2 in COPYING file
  - srt: Consume the error from gst_srt_object_write
  - srt: Check socket state before retrieving payload size
  - x265enc: fix deadlock on reconfig
  - webrtc: Require gstreamer-sdp in the pkg-config file
  - srtsrc: Fix timestamping
  - mfvideosrc: Use only the first video stream per device
  - srtobject: typecast SRTO_LINGER to linger
  - decklink: Correctly order the different dependent mode tables
  - wasapisrc: Make sure that wasapisrc produces data in loopback
    mode
  - wpesrc: fix some caps leaks using the non-GL output
  - smoothstreaming: clear live adapter on seek
  - vtdec/vulkan: use Shared storage mode for IOSurface textures
  - wpe: Move webview load waiting to WPEView
  - wpe: Use proper callback for TLS errors signal handling
  - kmssink: Do not source using padded width/height
  - avtp: avtpaafdepay: fix crash when building caps
  - opencv: set opencv_dep when option is disabled to fix the
    build
  - line21encoder: miscellaneous enhancements
  - Hls youtube issues with urisourcebin/queue2
  - rtmp2: Replace stats queue with stats lock
  - rtmp2sink: support EOS event for graceful connection shutdown
  - mpegtsmux: Make handling of sinkpads thread-safe
  - hlssink2: Actually release splitmuxsink's pads
  - mpegtsmux: Don't create streams with reserved PID