File libvpx.changes of Package libvpx.13783

Fri Jan 10 12:11:16 UTC 2020 - Adrian Schröter <>

- backport security fixes:
   CVE-2019-2126.patch bsc#1160611: double free in ParseContentEncodingEntry()
   CVE-2019-9325.patch bsc#1160612: out-of-bounds read
   CVE-2019-9232.patch bsc#1160613: Fix OOB memory access on fuzzed data
   CVE-2019-9433.patch bsc#1160614: use-after-free in vp8_deblock()
   CVE-2019-9371.patch bsc#1160615: resource exhaustion after memory leak
- executed test suite before submit

Thu Jan 18 10:29:12 UTC 2018 - Adrian Schröter <>

- cleanup traces for testing, we don't have the >400MB test data here

Thu Jan 18 08:57:32 UTC 2018 - Adrian Schröter <>

- Fix OOB caused by odd frame width with patch from android
  Adding patch CVE-2017-13194.patch (CVE-2017-13194)
- this changelog entry also contains the new scheme with full name
  and "umlaut" to test which tools may break with it in our distro.
  Please track problems here:

Thu Aug 31 06:26:03 UTC 2017 -

- limit maximum size to 8K Fulldome resolution to avoid
  DoS attacks. CVE-2017-0641 boo#1056539

Fri Mar  3 09:25:31 UTC 2017 -

- Version update to 1.6.1:
  * Improvements on the VP9 speed of encoding and decoding
  * Various fixes found by fuzzing

Sun Jan  1 13:53:12 UTC 2017 -

- Summary updates

Wed Sep  7 12:58:36 UTC 2016 -

- Ensure the enable vp8 vp9 postproc and multithread are always on
- Enable verbose build
- Add switches to be able to build chromium:
  * --enable-experimental --enable-spatial-svc

Fri Aug 12 17:26:48 UTC 2016 -

- Rename unfitting macro name "soname"; there is no SONAME here,
  just the version.

Thu Aug 11 12:42:01 UTC 2016 -

- Update to version 1.6.0
  This release improves upon the VP9 encoder and speeds up the encoding and
  decoding processes.

  - Enhancement:
    A core focus has been performance for low end Intel processors. SSSE3
    instructions such as 'pshufb' have been avoided and instructions have been
    reordered to better accommodate the more constrained pipelines.

    As a result, devices based on Celeron processors have seen substantial
    decoding improvements. From Indian Runner Duck to Javan Whistling Duck,
    decoding speed improved between 10 and 30%. Between Javan Whistling Duck
    and Khaki Campbell Duck, it improved another 10 to 15%.

    While Celeron benefited most, Core-i5 also improved 5% and 10% between the
    respective releases.

    Realtime performance for WebRTC for both speed and quality has received a
    lot of attention.

  - Bug Fixes:
    A number of fuzzing issues, found variously by Mozilla, Chromium and others,
    have been fixed and we strongly recommend updating.
- Remove libvpx-pkgconfig-version.patch

Tue Jun 14 06:18:52 UTC 2016 -

- Update to current upstream version to fix CVE-2016-2464 (boo#984448)

Tue Mar 22 14:54:16 UTC 2016 -

- Fix build in SLE_11 by disabling ssse3
- Fix vpc.pc version with libvpx-pkgconfig-version.patch

Tue Mar 22 07:57:46 UTC 2016 -

- Update to current upstream version to fix CVE-2016-1621 (bnc#972021)
- enable test suite during build
- From official Changelog:
  - Incompatible changes:
    The VP9 encoder's default keyframe interval changed to 128 from 9999.
- Drop libvpx-disable-cross-for-arm.patch

Sat Dec 19 17:08:27 UTC 2015 -

- Update to version 1.5.0
  + This release improves upon the VP9 encoder and speeds up the
    encoding and decoding processes.
  + Upgrading:
    This release is ABI incompatible with 1.4.0. It drops deprecated
    VP8 controls and adds a variety of VP9 controls for testing.
    The vpxenc utility now prefers VP9 by default.
  + Enhancements:
    Faster VP9 encoding and decoding.
    Smaller library size by combining functions used by VP8 and VP9.
  + Bug Fixes:
    A variety of fuzzing issues.
- Fixed libvpx-configure-add-s390.patch and changed baselibs.conf
  to libvpx3.
- Removed uneeded servive file.

Tue May 12 17:40:07 UTC 2015 -

- Update to version 1.4.0
  + This release includes significant improvements to the VP9 codec.
  + Upgrading:
    This release is ABI incompatible with 1.3.0. It drops the
    compatibility layer, requiring VPX_IMG_FMT_* instead of
    IMG_FMT_*, and adds several codec controls for VP9.
  + Enhancements:
    Faster VP9 encoding and decoding.
    Multithreaded VP9 decoding (tile and frame-based).
    Multithreaded VP9 encoding - on by default.
    YUV 4:2:2 and 4:4:4 support in VP9.
    10 and 12bit support in VP9.
    64bit ARM support by replacing ARM assembly with intrinsics.
  + Bug Fixes:
    Fixes a VP9 bitstream issue in Profile 1. This only affected
    non-YUV 4:2:0 files.
  + Known Issues:
    Frame Parallel decoding fails for segmented and non-420 files.
- Fixed all patches and changed baselibs.conf to libvpx2.

Mon Feb 23 14:24:04 UTC 2015 -

- Add baselibs.conf as source 

Mon Feb 23 13:37:39 UTC 2015 -

- Build with -std=gnu89 to deal with GCC 5 defaulting to -std=gnu11
  and the C11 stddef.h providing a max_align_t that conflicts with
  the one provided by nestegg/halloc/src/align.h.

Tue Dec 10 16:26:06 UTC 2013 -

- Update to version 1.3.0
  + This release is ABI and API compatible with Duclair (v1.0.0). 
  + This release introduces the VP9 codec in a backward-compatible 
    way. All existing users of VP8 can continue to use the library 
    without modification. However, some VP8 options do not map to 
    VP9 in the same manner.
  + Enhancements:
    - Get rid of bashisms in the main build scripts
    - Added usage info on command line options
    - Add lossless compression mode
    - Dll build of libvpx
    - Add additional Mac OS X targets: 10.7, 10.8 and 10.9
    - Add option to disable documentation
    - configure: add --enable-external-build support
    - make: support V=1 as short form of verbose=yes
    - configure: support mingw-w64
    - configure: support hardfloat armv7 CHOSTS
    - configure: add support for android x86
    - Add estimated completion time to vpxenc
    - Don't exit on decode errors in vpxenc
    - vpxenc: support scaling prior to encoding
    - vpxdec: support scaling output
    - vpxenc: improve progress indicators with --skip
    - msvs: Don't link to winmm.lib
    - Add a new script for producing vcxproj files
    - Produce Visual Studio 10 and 11 project files
    - Produce Windows Phone project files
    - msvs-build: use msbuild for vs >= 2005
    - configure: default configure log to config.log
    - Add encoding option --static-thresh
  + Speed:
    - Miscellaneous speed optimizations for VP8 and VP9.
  + Quality:
    - In general, quality is consistent with the Eider release.
  + Bug Fixes:
    - This release represents approximately a year of engineering 
      effort, and contains multiple bug fixes. Please refer to git 
      history for details.
- Rebase libvpx-armv7-use-hard-float.patch and 
  libvpx-configure-add-s390.patch to this release
- Droped version_1.1.0_to_1.2.0.diff
- Added xz BuildRequires
- Remove Source URL, as the tarball is not available at that place
- Tarball is generated from v1.3.0 tag

Mon Jan 28 17:07:51 UTC 2013 -

- update to version 1.2.0
  - doing it via patch due to lacking release tar ball

- From release notes:
  - full api and abi compatible to 1.x release line
  - Enhancements:
      VP8 optimizations for MIPS dspr2
      vpxenc: add -quiet option
  - Speed:
      Encoder and decoder speed is consistent with the Eider release.
  - Quality:
      In general, quality is consistent with the Eider release.
      Minor tweaks to ARNR filtering
      Minor improvements to real time encoding with multiple temporal layers
  - Bug Fixes:
      Fixes multithreaded encoder race condition in loopfilter
      Fixes multi-resolution threaded encoding
      Fix potential encoder dead-lock after picture resize

Mon Dec 10 12:48:46 UTC 2012 -

- Fix ARM builds
  + Removed old unused patch (libvpx-configure-add-armv7-tgt-isa.patch)
  + Add new patches for ARM:
    - libvpx-disable-cross-for-arm.patch: to fix toolchain names for ARM
    - libvpx-armv7-use-hard-float.patch: to fix float abi for armv7

Tue Sep 18 08:50:29 UTC 2012 -

- Update to version 1.1.0:
  + Enhancements:
    - Adds a motion compensated temporal denoiser to the encoder
    - support for new compilers and platforms were added
    - Changing resolution with vpx_codec_enc_config_set() is now
  + Improved performance
  + Bugs fixed
- Changes from version 1.0.0:
  + Enhancements:
    - This release introduces several substantial new features to
      the encoder, of particular interest to real time streaming
  + Improved performance
  + Encoder quality in the single stream case is consistent with
    the Cayuga release.
  + Bug fixes
- Rename libvpx0 to libvpx1, following upstreams soname bump (also
  in baselibs.conf)
- Add pkg-config BuildRequires: as we provide a .pc file, we need
  pkg-config to be able to create the pkgconfig() provides
- libvpx-configure-add-armv7-tgt-isa.patch currently disabled:
  needs more work.

Tue Nov 29 15:36:19 CET 2011 -

- make it build on s390/s390x 

Sat Oct 15 01:47:32 UTC 2011 -

- support build libvpx on armv7hl architecture
  * add libvpx-configure-add-armv7-tgt-isa.patch
  * add armv7-linux-gcc target and enable runtime cpu detect when
    configure. It both support ARMv7 cpu with or without NEON.
    e.g. NVIDIA Tegra 2

Wed Aug 24 10:11:27 UTC 2011 -

- update to version 0.9.7 patchlevel 1
  * speed and quality optimizations (see CHANGELOG file)
  * bugfixes (see CHANGELOG file)
  * provides pkgconfig file

Fri Apr 14 13:38:21 UTC 2011 -
- added 32bit compatibility libraries

Wed Mar  9 14:10:47 UTC 2011 -

- update to version 0.9.6
  + speed and picture quality improvements

Sat Feb 12 23:33:27 UTC 2011 -

- Use make_install instead of makeinstall: has the side effect of
  fixing Fedora builds.

Wed Dec  1 10:53:12 UTC 2010 -

- update to version 0.9.5, find details in CHANGES file
  + reworked command line utils
  + lib has general big speed and quality improvements
  + hardware acceleration via MMX and SSE is supported if available
  + bugfixes

Mon Sep 13 18:23:09 CEST 2010 -

- Fix license tags: libvpx0 has no GPLv2+ code and should be BSD3c
  only. Update the other tags to mention BSD3c instead of
  "BSD-style license", which is something
  doesn't know.

Tue Aug 24 21:00:00 UTC 2010 -

- Update to version 0.9.1:
  + Enhancements:
    - ivfenc/ivfdec now support YUV4MPEG2 input and pipe I/O
    - Speed optimizations
  + Bugfixes:
    - Rate control
    - Prevent out-of-bounds accesses on invalid data
  + Build system updates:
    - Detect toolchain to be used automatically for native builds
    - Support building shared libraries
    - Better autotools emulation (--prefix, --libdir, DESTDIR)
- Pass --enable-pic, enable-shared & --enable-debug to configure
- Split out libvpx0 according SLPP.
- Drop upstream.diff (merged)
- Rename buildfix.diff to libvpx-define-config_pic.patch and tag
  the patch line.
- clean spec-file (spec-cleaner).

Fri Jun  4 10:26:37 UTC 2010 -

- Initial package 
   * based on the latest svn snapshot
   * Included patch to fix build for openSUSE <= 11.2
openSUSE Build Service is sponsored by