Revisions of libde265 (12)
New upstream release (with CVE fixes). Note the aarch64 builds seems a bit flaky, kicking off a new rebuild let the builds compile without errors, so not sure whats going on there.
- Update to version 1.0.15:
* A couple of bug fixes, including the following CVEs:
- CVE-2023-49465
- CVE-2023-49467
- CVE-2023-49468
- Changes from version 1.0.14:
* This fixes build-time SSE detection when using the CMake build
system. No other changes than that. You don't need to update if
you are using the autotools build system.
- Changes from version 1.0.13:
* This release fixes among other smaller issues the following
crashes:
- SEGV:occured in function main at dec265.cc
- Memory allocation failed in function main at dec265.cc
- Buffer over-read causes segmentation fault in
pic_parameter_set::dump
- Potential segmentation fault due to incorrect realloc in CABA
C_encoder_bitstream::check_size_and_resize (unused function)
- SEGV in libde265 in slice_segment_header::dump_slice_segment_
header
- Libde265 v1.0.12 was discovered that requested allocation
size exceeds maximum supported size of 0x10000000000
- heap-buffer-overflow in derive_spatial_luma_vector_prediction
(...)
- Update to version 1.0.12: * Fix CVE-2023-27102 * Fix CVE-2023-27103
New upstream release - check results in staging before ack!
- Update to version 1.0.8 * read HDR parameters from VUI header * fix reading matrix_coeffs from VUI header version 1.0.7: * add API to read VUI color information from bitstream version 1.0.6: * fix race in static mutex initialization * fix missing headers to install in CMakeLists.txt
Not sure this is really needed, but doing it just for safety as we do build -32 bits libs for gst-bad
New package, gst-plugins-bad can use this as a builddep. Subbing here at packman as I'm 99% sure legal would reject this one.