Thanks to good help from Timothy B. Terriberry, most of the proposed patches for libtheora are now in the master branch. The only major obstacle is the proper fix for CVE-2024-56431 discussed in <URL: https://gitlab.xiph.org/xiph/theora/-/merge_requests/28 >. Once a good solution for this is found, I believe it is time to wrap up a new release. I assume the underwelming response on my earlier emails on this list indicate the level of interest from others in making such release happen. Not to worry, I am able to move forward independent of this. As for version number, I am currently more leaning towards 1.2.0beta1, to indicate that there might still be some issues that would be nice to have fixed before 1.2.0 release, but it is a lot better than the alpha version. Feel free to provide your input on <URL: https://gitlab.xiph.org/xiph/theora/-/merge_requests/30 > regarding the release number and the release process if you have input or opinions. I still hope to see more people on IRC, #theora on irc.libera.chat. :) -- Happy hacking Petter Reinholdtsen
In case someone is wondering what is new with the code on
<URL: https://gitlab.xiph.org/xiph/theora/ >, this is the current draft
for the CHANGES entry of the new release:
- Updated libogg dependency to version 1.3.4 for ogg_uint64_t.
- Updated doxygen setup.
- Updated autotools setup and support scripts (#1467 #1800 #1987 #2318
#2320).
- Added support for RISC OS.
- Fixed mingw build (#2141).
- Improved ARM support.
- Converted SCons setup to work with Python 3.
- Introduced new configure options --enable-mem-constraint and
--enable-gcc-sanitizers.
- Fixed all known compiler warnings and errors from gcc and clang.
- Improved examples for stability and correctness.
- Variuos speed, bug fixes and code quality improvements.
- Fixed build problem with Visual Studio (#2317).
- Avoids undefined bit shift of signed numbers (#2321, #2322).
- Avoids example encoder crash on bogus audio input (#2305).
- Fixed musl linking issue with asm enabled (#2287).
- Fixed some broken clamping in rate control (#2229).
- Added NULL check _tc and _setup even for data packets (#2279).
- Fixed mismatched oc_mb_fill_cmapping11 signature (#2068).
- Updated the documentation for theora_encode_comment() (#726).
- Adjusted build to Only link libcompat with dump_video (#1587).
- Corrected an operator precedence error in the visualization
code (#1751).
- Fixed two spelling errors in the comments (#1804).
- Improved library documentation and specification text.
- Adjusted library dependencies so libtheoraenc do not depend on
libtheoradec.
- Handle fallout from CVE-2017-14633 in libvorbis, check return value
in encoder_example and transcoder_example.
The fix for CVE-2024-56431 is not yet in the master branch, a draft is
available in
<URL: https://gitlab.xiph.org/xiph/theora/-/merge_requests/28 >.
--
Happy hacking
Petter Reinholdtsen
Petter, It's been a while since I've seen activity on libtheora and it's a busy time with Ramadan happening, However, I am truly happy that you're helping make a new release happen. Also, make sure we remember to name the official 1.2 release "Eyjafjallaj?kull" as we discussed, what, a decade ago? :-p Sincerely, Basil On 3/10/25 2:43 AM, Petter Reinholdtsen wrote:> Thanks to good help from Timothy B. Terriberry, most of the proposed > patches for libtheora are now in the master branch. The only major > obstacle is the proper fix for CVE-2024-56431 discussed in > <URL: https://gitlab.xiph.org/xiph/theora/-/merge_requests/28 >. Once a > good solution for this is found, I believe it is time to wrap up a new > release. > > I assume the underwelming response on my earlier emails on this list > indicate the level of interest from others in making such release > happen. Not to worry, I am able to move forward independent of this. > > As for version number, I am currently more leaning towards 1.2.0beta1, > to indicate that there might still be some issues that would be nice to > have fixed before 1.2.0 release, but it is a lot better than the alpha > version. Feel free to provide your input on > <URL: https://gitlab.xiph.org/xiph/theora/-/merge_requests/30 > > regarding the release number and the release process if you have input > or opinions. > > I still hope to see more people on IRC, #theora on irc.libera.chat. :) >