From bee356b41839847b4c7230aaab88af59ab4034d1 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 1 Feb 2026 19:41:37 +0100 Subject: [PATCH] package/libvpx: security bump to version 1.16.0 Brings additional optimizations and bugfixes: Fix to heap buffer overflow in vp9_deblock, vp9_post_proc_frame, and vp9_pack_bitstream. Fix to integer overflow in vp9_highbd_post_proc, vp9_rc_regulate_q, tiny_ssim, and vp9_calc_pframe_target_size_one_pass_cbr. Fix to use-of-uninitialized-value in vp9_highbd_post_proc, mfqe, and vp8_datarate_test. Fix to out-of-bounds in log_tile_cols_from_picsize_level. Fix to double free on initialization failure in vpx_codec_enc_init_multi. Fix to division-by-zero crash in vpxenc with 0 FPS numerator input. Fix to various build failures for Arm/SVE2, macOS cross-compilation, and Xcode 16. https://chromium.googlesource.com/webm/libvpx/+/refs/tags/v1.16.0 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard (cherry picked from commit 7e5a961eb0b74399d81518ef3865c32b118ea6da) Signed-off-by: Thomas Perale --- package/libvpx/libvpx.hash | 2 +- package/libvpx/libvpx.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libvpx/libvpx.hash b/package/libvpx/libvpx.hash index 1082721f1a..33d15fe108 100644 --- a/package/libvpx/libvpx.hash +++ b/package/libvpx/libvpx.hash @@ -1,4 +1,4 @@ # Locally computed: -sha256 26fcd3db88045dee380e581862a6ef106f49b74b6396ee95c2993a260b4636aa libvpx-1.15.2.tar.gz +sha256 7a479a3c66b9f5d5542a4c6a1b7d3768a983b1e5c14c60a9396edc9b649e015c libvpx-1.16.0.tar.gz sha256 8267348d5af1262c11d1a08de2f5afc77457755f1ac658627dd9acf71011d615 LICENSE sha256 cc3273e0694ea5896145e0677699b53471b03ea43021ddc50e7923fbb9f5023c PATENTS diff --git a/package/libvpx/libvpx.mk b/package/libvpx/libvpx.mk index 4f4144f4ff..d6b84ffec3 100644 --- a/package/libvpx/libvpx.mk +++ b/package/libvpx/libvpx.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBVPX_VERSION = 1.15.2 +LIBVPX_VERSION = 1.16.0 LIBVPX_SITE = $(call github,webmproject,libvpx,v$(LIBVPX_VERSION)) LIBVPX_LICENSE = BSD-3-Clause LIBVPX_LICENSE_FILES = LICENSE PATENTS