Security Fixes
- libre's HTTP Basic auth verifier accept empty or prefix credential blindly fixed by #1601
- libre allows one spoofed UDP packet forges RTCP control messages fixed by #1600
What's Changed
- btrace: optimize addr2line handling by @sreimers in #1598
- aubuf: remove adaptive mode by @cspiel1 in #1597
- httpauth/basic: fix mem_seccmp cmp length by @sreimers in #1601
- srtcp: fix/add AES-GCM no encryption flag auth by @sreimers in #1600
- mem_pool: fix mem_pool_flush free list handling by @sreimers in #1604
- mem/mem_pool: check mem_pool_borrow_extend empty pool param by @sreimers in #1606
- json/decode_odict: fix possible container dangling pointer by @sreimers in #1605
Full Changelog: v4.10.0...v4.11.0
Contributors
sreimers and cspiel1