Two patches, related but independently reviewable.

Patch 1 bumps the required libRIST version from 0.2.7 (set in 2022)
to 0.2.15 (current upstream stable, released 2026-05-14 as a security
update). The bump addresses several real protocol-path issues
including a PSK bad-packet-lockout bypass and SRP downgrade vectors.
No FFmpeg source changes are needed; the public API surface used by
libavformat/librist.c is unchanged between 0.2.7 and 0.2.15.

Patch 2 moves librist from EXTERNAL_LIBRARY_LIST to
EXTERNAL_AUTODETECT_LIBRARY_LIST. libRIST is now broadly packaged -
Alpine, Arch, Chimera, Debian (since bookworm), Devuan, Fedora (since
38), EPEL 9/10, Gentoo, Kali, Mageia, Manjaro, MX Linux, NixOS,
openmamba, openSUSE Leap and Tumbleweed, Parabola, Parrot, PLD, Pisi,
PureOS, Raspbian, Rosa, SlackBuilds, Solus, T2 SDE, Ubuntu (since
24.04 noble), Void Linux on the Linux side; Homebrew on macOS; MSYS2
(mingw64, ucrt64, clang64, clangarm64) on Windows; FreeBSD Ports
(multimedia/librist) on BSD. Despite that, the default-disabled
posture means most distribution ffmpeg builds silently omit RIST
input/output even when libRIST is installed on the same system.

Patch 2 is independently useful even if patch 1 is held; the version
bump is independently useful even if patch 2 is rejected.

Sergio Ammirata (2):
  avformat/librist: bump required version to 0.2.15
  configure: enable librist by default when present

 configure | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

-- 
2.45.1
_______________________________________________
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to