Opened 7 months ago

Closed 6 months ago

#23006 closed enhancement (fixed)

libde265-1.0.18

Reported by: Bruce Dubbs Owned by: zeckma
Priority: high Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (10)

comment:1 by Joe Locash, 6 months ago

Priority: normal → elevated 
v1.0.17 - maintenance

This release removes the autotools build scripts. Please migrate to cmake 
if you have not done that yet.
Furthermore, many input validations have been added and security 
relevant issues have been fixed.

CVE-2026-33165
CVE-2026-33164

Note for packaging
the name of libde265ConfigVersion.cmake will shortly change to 
libde265-config-version.cmake in an upcoming v1.0.18 release. 
This makes it consistent with the naming scheme in libheif. 
If you want to avoid renaming the file in your package, wait for v1.0.18.
Last edited 6 months ago by Bruce Dubbs (previous) (diff)

comment:2 by Xi Ruoyao, 6 months ago

autoconf is no longer supported and cmake is required :(.

comment:3 by Joe Locash, 6 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:4 by Joe Locash, 6 months ago

Summary: libde265-1.0.17 → libde265-1.0.18

Now at 1.0.18.

comment:5 by Joe Locash, 6 months ago 

v1.0.18 - maintenance Latest

    - libde265ConfigVersion.cmake renamed to libde265-config-version.cmake
    - fix pkg-config when installing to absolute paths
    - fix compilation with MSVC in Debug mode
    - removed the (defunct) encoder code and the internal development tools from the tarball

Fixed at 6c6ceaf973.

Leaving open for SA.

comment:6 by zeckma, 6 months ago

Owner: changed from Joe Locash to zeckma
Status: assigned → new

Taking care of the SA.

comment:7 by zeckma, 6 months ago

Status: new → assigned

comment:8 by zeckma, 6 months ago

Priority: elevated → high

comment:9 by zeckma, 6 months ago

Security fixes

  • CVE-2026-33164 (High): Segmentation fault (denial of service)
  • CVE-2026-33165 (Medium): Out-of-bound heap write

comment:10 by zeckma, 6 months ago

Resolution: → fixed
Status: assigned → closed

SA-13.0-011 issued.

Note: See TracTickets for help on using tickets.