mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-25 11:30:37 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libde265: security bump version to 1.1.0

Browse Source 
https://github.com/strukturag/libde265/releases/tag/v1.1.0

"Security fixes

- CVE TBD (GHSA-g2rg-wj66-w594) - Out-of-bounds write in
 process_reference_picture_set via predicted short-term RPS
- CVE TBD (GHSA-vv8h-932h-7r86) - Heap buffer overflow in
 de265_image_get_buffer via SPS dimension integer overflow
- CVE TBD (GHSA-g5hj-rf9f-7vxm) - Unbounded memory accumulation via
 orphaned slice headers in read_slice_NAL
- (GHSA-x27c-jp65-g395) - Quadratic CPU consumption in NAL parser
 (remove_stuffing_bytes, resize)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Bernd Kuhls
2026-05-26 22:06:41 +02:00
committed by Peter Korsgaard
parent f51769b7e9
commit b280053180
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libde265/libde265.hash
View File

@@ -1,4 +1,4 @@
# From https://github.com/strukturag/libde265/releases/tag/v1.0.19
sha256 bb19a0b485d2643e0eeb7e91f3ab32d1ad617e7c487dbedc91214ca3dbd8d7eb libde265-1.0.19.tar.gz
# From https://github.com/strukturag/libde265/releases/tag/v1.1.0
sha256 afc19dd28e2fc523de5952bba5224ee1d28e286c72436d2843df126cca1181fd libde265-1.1.0.tar.gz
# Locally computed
sha256 02cc1585a20677992e0ba578fa692635dc193735f2691dc81de924b51c4e8020 COPYING

2
package/libde265/libde265.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBDE265_VERSION = 1.0.19
LIBDE265_VERSION = 1.1.0
LIBDE265_SITE = https://github.com/strukturag/libde265/releases/download/v$(LIBDE265_VERSION)
LIBDE265_LICENSE = LGPL-3.0+
LIBDE265_LICENSE_FILES = COPYING