avformat/mpegts: create stream groups after having parsed the entire PMT

28 March 21:13 - FFmpeg - James Almer

Some faulty files have an LCEVC descriptor with a single stream, resulting in a group being created but never fully populated with the current implementation.

avcodec/decode: add a hwaccel specific post_process callback to FrameDecodeData

28 March 20:14 - FFmpeg - James Almer

Leave the existing one for non decoder-specific, post processing usage.

swscale/tests/sws_ops: add option for summarizing all operation patterns

28 March 16:48 - FFmpeg - Niklas Haas

This can be used to either manually verify, or perhaps programmatically generate, the list of operation patterns that need to be supported by a backend to be feature-complete.

avfilter/vf_lcevc: workaround for unknown initial dimensions

28 March 00:00 - FFmpeg - James Almer

advisories: Update GLIBC-SA-2026-0005 and GLIBC-SA-2026-0006.

27 March 12:08 - glibc - Carlos O'Donell

Update advisories with Fix-Commit information for 2.43.9000 and 2.44.

resolv: Count records correctly (CVE-2026-4437)

23 March 20:33 - glibc - Carlos O'Donell

The answer section boundary was previously ignored, and the code in getanswer_ptr would iterate past the last resource record, but not beyond the end of the returned data.

Add flag `FT_CONFIG_OPTION_HVF`.

23 March 18:36 - FreeType - Debbie Goldsmith

This flag is going to be used to conditionally compile support for Apple's Hierarchical Variable Font (HVF) format.

Support Hierarchical Variable Fonts (HVF) using Apple's 'libhvf' library

23 March 18:36 - FreeType - Debbie Goldsmith

The new 'hvf' module is a thin wrapper around 'libhvf' with the necessary boilerplate stuff to integrate it into FreeType.

Add advisory text for CVE-2026-4437

23 March 16:26 - glibc - Carlos O'Donell

Explain the security issue and set the context for the vulnerability to help downstreams get a better understanding of the issue.

Add advisory text for CVE-2026-4438

23 March 16:26 - glibc - Carlos O'Donell

Explain the security issue and set the context for the vulnerability to help downstreams get a better understanding of the issue.