mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-03 07:21:45 -09:00
6199b9b9cb
https://github.com/strukturag/libde265/releases/tag/v1.1.0
"Security fixes
- CVE TBD (GHSA-g2rg-wj66-w594) - Out-of-bounds write in
process_reference_picture_set via predicted short-term RPS
- CVE TBD (GHSA-vv8h-932h-7r86) - Heap buffer overflow in
de265_image_get_buffer via SPS dimension integer overflow
- CVE TBD (GHSA-g5hj-rf9f-7vxm) - Unbounded memory accumulation via
orphaned slice headers in read_slice_NAL
- (GHSA-x27c-jp65-g395) - Quadratic CPU consumption in NAL parser
(remove_stuffing_bytes, resize)
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b280053180)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>