From d29bfbd6a3e8b6101207971bbc127a796470647e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Wed, 8 Apr 2026 10:55:06 +0200 Subject: [PATCH] package/libde265: security bump version to 1.0.18 https://github.com/strukturag/libde265/releases/tag/v1.0.18 https://github.com/strukturag/libde265/releases/tag/v1.0.17 Fixes CVE-2026-33164 & CVE-2026-33165. Used sha256 tarball hash provided by upstream. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit d4b8a42fb253116befe539e5529ac4efd97ab421) Signed-off-by: Thomas Perale --- package/libde265/libde265.hash | 3 ++- package/libde265/libde265.mk | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/package/libde265/libde265.hash b/package/libde265/libde265.hash index efd48d13aa..d977af5521 100644 --- a/package/libde265/libde265.hash +++ b/package/libde265/libde265.hash @@ -1,3 +1,4 @@ +# From https://github.com/strukturag/libde265/releases/tag/v1.0.18 +sha256 800478f3bf35f0621b14928ceb317579f3e8b23de4bd2aac29b6cb8be962bbd8 libde265-1.0.18.tar.gz # Locally computed -sha256 b92beb6b53c346db9a8fae968d686ab706240099cdd5aff87777362d668b0de7 libde265-1.0.16.tar.gz sha256 02cc1585a20677992e0ba578fa692635dc193735f2691dc81de924b51c4e8020 COPYING diff --git a/package/libde265/libde265.mk b/package/libde265/libde265.mk index 3d9b96134f..aab86ab3d7 100644 --- a/package/libde265/libde265.mk +++ b/package/libde265/libde265.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBDE265_VERSION = 1.0.16 +LIBDE265_VERSION = 1.0.18 LIBDE265_SITE = https://github.com/strukturag/libde265/releases/download/v$(LIBDE265_VERSION) LIBDE265_LICENSE = LGPL-3.0+ LIBDE265_LICENSE_FILES = COPYING