Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade dav1d, libde265, libheif, libjxl #26517

Merged
merged 2 commits into from
Jul 19, 2023
Merged

Upgrade dav1d, libde265, libheif, libjxl #26517

merged 2 commits into from
Jul 19, 2023

Conversation

novomesk
Copy link
Contributor

So that Linux build uses same versions like Windows build.

@ilya-fedin
Copy link
Contributor

I wonder whether there are new versions of lcms2, brotli and highway? 🤔
While the Windows script probably relies on libjxl builds script to build them, Dockerfile does that manually...

@novomesk
Copy link
Contributor Author

There are newer versions of other libraries too.

However I think it is not always necessary to jump to the latest version quickly. Sometimes new versions have new problems.

Upgrades to libde265, libheif, libjxl solve discovered vulnerabilities and I use dav1d 1.2.1 for some time too.

I am submitting changes I am confident with.

@ilya-fedin
Copy link
Contributor

I thought those libraries are participating in the file processing and so are likely to be the cause of vulnerabilities? I don't monitor that though and don't know whether there are vulnerabilities caused by those libraries (which could be considered a part of libjxl as they're submodules in libjxl repo).

@novomesk
Copy link
Contributor Author

I understand.

That vulnerability fixed in libjxl 0.8.2 is only related to libjxl itself, it is not related to submodule libraries.

@john-preston john-preston merged commit d0e8516 into telegramdesktop:dev Jul 19, 2023
2 checks passed
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants