Files
buildroot/package/fluidsynth/fluidsynth.mk
Julien Olivain a40212568c package/fluidsynth: security bump to version 2.5.7
For change log since v2.4.7, see:
https://github.com/FluidSynth/fluidsynth/releases

According to:
https://github.com/FluidSynth/fluidsynth/blob/master/doc/wiki/ChangeLog.md

FluidSynth 2.5.6 fixes:
CVE-2026-58264 - a heap-based buffer overrun in command handler (GHSA-mqmq-w63q-cj94)
CVE-2026-61714 - a heap-based buffer overflow in MIDI player (GHSA-976m-35rw-h3m6)
CVE-2026-61721 - a heap-based buffer overrun for DLS samples (GHSA-59ph-rx8r-8p4j)
CVE-2026-61723 - a DLS ptbl chunk integer overflow (GHSA-r4mc-v3p8-pv47)
CVE-2026-61722 - a DLS articulation chunk integer overflow (GHSA-hp72-35pr-6h6r)
CVE-2026-61720 - a SF2 DMOD chunk integer underflow (GHSA-rmc4-c8hw-455w)

FluidSynth 2.5.2 fixes:
CVE-2025-68617 - a heap-based use-after-free involving DLS files (GHSA-ffw2-xvvp-39ch)

SDL2 audio support was removed upstream in commit:
89145b004a

It was replaced by the newer SDL3. This commit reflects that change
(update option name and comments, add legacy option entry).

Also, dynamic library dependency was added in Buildroot commit:
111a1c7091
This commot removes the duplicate dependency for SDL3.

FluidSynth also added a native DLS soundfont support in:
c959f8d208
It is enabled by default and uses C++17. This commit adds a new
option with a dependency on gcc >= 7.

The license option hash is also updated, after the FSF address
update in:
db42fa333b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 566bdcb97f)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2026-08-28 15:58:05 +02:00

91 lines
2.3 KiB
Makefile

################################################################################
#
# fluidsynth
#
################################################################################
FLUIDSYNTH_VERSION = 2.5.7
FLUIDSYNTH_SITE = $(call github,FluidSynth,fluidsynth,v$(FLUIDSYNTH_VERSION))
FLUIDSYNTH_LICENSE = LGPL-2.1+
FLUIDSYNTH_LICENSE_FILES = LICENSE
FLUIDSYNTH_CPE_ID_VENDOR = fluidsynth
FLUIDSYNTH_INSTALL_STAGING = YES
FLUIDSYNTH_DEPENDENCIES = libglib2
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_ALSA_LIB),y)
FLUIDSYNTH_CONF_OPTS += -Denable-alsa=1
FLUIDSYNTH_DEPENDENCIES += alsa-lib
else
FLUIDSYNTH_CONF_OPTS += -Denable-alsa=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_DBUS),y)
FLUIDSYNTH_CONF_OPTS += -Denable-dbus=1
FLUIDSYNTH_DEPENDENCIES += dbus
else
FLUIDSYNTH_CONF_OPTS += -Denable-dbus=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_FLOATS),y)
FLUIDSYNTH_CONF_OPTS += -Denable-floats=1
else
FLUIDSYNTH_CONF_OPTS += -Denable-floats=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_JACK2),y)
FLUIDSYNTH_CONF_OPTS += -Denable-jack=1
FLUIDSYNTH_DEPENDENCIES += jack2
else
FLUIDSYNTH_CONF_OPTS += -Denable-jack=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_LIBSNDFILE),y)
FLUIDSYNTH_CONF_OPTS += -Denable-libsndfile=1
FLUIDSYNTH_DEPENDENCIES += libsndfile
else
FLUIDSYNTH_CONF_OPTS += -Denable-libsndfile=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_NATIVE_DLS),y)
FLUIDSYNTH_CONF_OPTS += -Denable-native-dls=1
else
FLUIDSYNTH_CONF_OPTS += -Denable-native-dls=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_PORTAUDIO),y)
FLUIDSYNTH_CONF_OPTS += -Denable-portaudio=1
FLUIDSYNTH_DEPENDENCIES += portaudio
else
FLUIDSYNTH_CONF_OPTS += -Denable-portaudio=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_PULSEAUDIO),y)
FLUIDSYNTH_CONF_OPTS += -Denable-pulseaudio=1
FLUIDSYNTH_DEPENDENCIES += pulseaudio
else
FLUIDSYNTH_CONF_OPTS += -Denable-pulseaudio=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_READLINE),y)
FLUIDSYNTH_CONF_OPTS += -Denable-readline=1
FLUIDSYNTH_DEPENDENCIES += readline
else
FLUIDSYNTH_CONF_OPTS += -Denable-readline=0
endif
ifeq ($(BR2_PACKAGE_FLUIDSYNTH_SDL3),y)
FLUIDSYNTH_CONF_OPTS += -Denable-sdl3=1
FLUIDSYNTH_DEPENDENCIES += sdl3
else
FLUIDSYNTH_CONF_OPTS += -Denable-sdl3=0
endif
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
FLUIDSYNTH_CONF_OPTS += -Denable-systemd=1
FLUIDSYNTH_DEPENDENCIES += systemd
else
FLUIDSYNTH_CONF_OPTS += -Denable-systemd=0
endif
$(eval $(cmake-package))