From: Khem Raj <[email protected]>
Upstream changes (release notes):
* 1.0.19: security and edge-case correctness fixes - heap-buffer-overflow
read in decode_slice_unit_tiles() from unvalidated PPS tile geometry
(CVE-2026-45382) and heap OOB read in decode_slice_unit_WPP() via an
out-of-bounds CtbAddrRStoTS access (CVE-2026-45383); dec265 SDL fixes
for 4:4:4 streams and mid-stream resolution changes. ABI compatible
with 1.0.18.
Not upgraded to 1.1.x: 1.1.0 reworked the x86 SIMD path to dispatch at
runtime via __builtin_cpu_supports(), which reads the compiler-rt global
__cpu_model. Under this distro's clang/lld toolchain, linking the shared
library then fails with
R_X86_64_PC32 cannot be used against symbol '__cpu_model'; recompile with -fPIC
because clang emits a direct PC-relative access to that exported,
preemptible symbol. Building the objects -fPIC, -Bsymbolic,
--exclude-libs, -fno-direct-access-external-data and a version script
localizing __cpu_model were all tried without success (lld validates the
relocation before applying the localization). 1.0.19 stays on the
compile-time SSE path and builds cleanly, so it is the latest buildable
release here.
Signed-off-by: Khem Raj <[email protected]>
(cherry picked from commit 99ca84156ddd5d09aea923013a4830a6430f8ec0)
Signed-off-by: Ankur Tyagi <[email protected]>
---
.../libde265/{libde265_1.0.18.bb => libde265_1.0.19.bb} | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.18.bb => libde265_1.0.19.bb} (93%)
diff --git a/meta-multimedia/recipes-multimedia/libde265/libde265_1.0.18.bb b/meta-multimedia/recipes-multimedia/libde265/libde265_1.0.19.bb
similarity index 93%
rename from meta-multimedia/recipes-multimedia/libde265/libde265_1.0.18.bb
rename to meta-multimedia/recipes-multimedia/libde265/libde265_1.0.19.bb
index 00fc16c0ce..c5fbedb22a 100644
--- a/meta-multimedia/recipes-multimedia/libde265/libde265_1.0.18.bb
+++ b/meta-multimedia/recipes-multimedia/libde265/libde265_1.0.19.bb
@@ -9,7 +9,7 @@ LICENSE_FLAGS = "commercial"
LIC_FILES_CHKSUM = "file://COPYING;md5=695b556799abb2435c97a113cdca512f"
SRC_URI = "git://github.com/strukturag/libde265.git;branch=master;protocol=https;tag=v${PV}"
-SRCREV = "36ad04841c209cb8b3577ec2723d431b6bf7efa0"
+SRCREV = "824b4138ecd51611d7073f1b50d5d6f982609b06"
inherit cmake pkgconfig
@@ -22,4 +22,3 @@ PACKAGECONFIG[libsdl] = "-DENABLE_SDL=ON,-DENABLE_SDL=OFF,virtual/libsdl2"
FILES:${PN} += "${libdir}/libde265.so"
FILES:${PN}-dev = "${includedir} ${libdir}/cmake ${libdir}/pkgconfig"
INSANE_SKIP:${PN} = "dev-so"
-
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.