Skip to content

3.10.1 - libzvbi 0.2.46 security fix

Choose a tag to compare

View all tags
@superuser404notfound superuser404notfound released this 26 Oct 14:47
· 18 commits to main since this release
3.10.1
2c7977d

Same n8.1.3 FFmpeg, dav1d, zimg and local patches as 3.10.0. libzvbi moves to 0.2.46 for a security fix.

What ships now

  • libzvbi 0.2.46 fixes CVE-2026-110654 (GHSA-p2vx-rpw8-hp43, medium): an out-of-bounds write in the teletext DRCS conversion (convert_drcs, src/packet.c) driven by the page's DRCS mode table. The libzvbi_teletext decoder is built, so a DVB teletext track in a live or recorded transport stream reaches that code. Upgrading is recommended for anyone who decodes DVB teletext.

Build

All ten slices rebuilt from a fresh libzvbi tree with Xcode 27.1; BUILD-INFO.txt records the new inputs and output hashes. Only libzvbi changes in content (the added bounds check); the FFmpeg, dav1d and zimg binaries are rebuilt from unchanged sources at unchanged sizes. swift test: 37 tests in 12 suites pass.

Closes #9.

Assets 2
Loading