| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libBasicUsageEnvironment2 | Distribution: openSUSE Tumbleweed |
| Version: 2026.06.01 | Vendor: openSUSE |
| Release: 1.3 | Build date: Tue Jun 2 09:30:31 2026 |
| Group: System/Libraries | Build host: reproducible |
| Size: 81724 | Source RPM: live555-2026.06.01-1.3.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: http://www.live555.com/liveMedia/ | |
| Summary: Basic Usage Environment library of live555 streaming media | |
This code forms a set of C++ libraries for multimedia streaming, using open standard protocols (RTP/RTCP, RTSP, SIP). These libraries can be used to build streaming applications
LGPL-2.1-only
* Tue Jun 02 2026 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 2026.06.01:
+ Updated the "RTSPServer" implementation of the "SETUP" command
to make it more robust if subclassed code reimplements
"lookupServerMediaSession()" as an asynchronous operation.
* Mon Jun 01 2026 Dirk Müller <dmueller@suse.com>
- update to 2026.05.30:
* Updated the "RTSPServer" implementation some more to make it
more robust if subclassed code reimplements
"lookpServerMediaSession()" as an asynchronous operation.
* Added an (integer) index to identify each server's
'client connection', and changed the "fClientConnections" table
to be indexed by this id.
* In the "RTSPServer" implementation, removed the
"fOurClientConnection" member variable.
This had been left over from when the RTSP "SETUP" command had
been implemented as a single, synchronous function.
Now that "SETUP" is implemented using multiple functions,
possibly asynchronously (depending upon how
"lookpServerMediaSession()" is implemented), this member
variable was potentially dangerous if more than one "SETUP" is
performed concurrently on the same client connection, or on
separate client connections.
* Thu May 28 2026 Dirk Müller <dmueller@suse.com>
- update to 2026.05.28:
* fix use-after-free memory corruption introduced in fix
for CVE-2026-41470
* Wed May 27 2026 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 2026.04.22 (CVE-2026-41470, boo#1265856):
+ Added extra checking to the handling of the RTSP server's
"PLAY", "PAUSE", "TEARDOWN", and "SET_PARAMETER" commands, to
ensure that, if the session is authenticated, then a proper
authentication check is done before these commands are handled.
This protects against the use of a 'stolen' RTSP session id to
send these commands. (Note, however, that if the session is
not authenticated (i.e., no username,password is needed), then no
such protection is possible.)
- Changes from version 2026-04-01:
+ Updated the way that the RTSP server generates successive RTSP
'session ids' to make it less likely that an attacker could
guess a session id.
+ Updated the RTSP server implementation to make it possible for
a client to request both interleaved (i.e., RTP/RTCP-over-TCP)
and non-interleaved (i.e., RTP/RTCP-over-UDP) delivery within
the same session.
* Fri Mar 27 2026 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 2026.03.23:
+ Fixed a bug in the RTSP server code that caused it to
improperly handle non-interleaved "SETUP"s that were sent for a
session where interleaving (i.e., RTP/RTCP-over-TCP) had
already been "SETUP". (This could cause a 'use-after-free'
error.
- For changes between 2024.08.01 to today, please refer to
https://download.live555.com/changelog.txt
* Sat Aug 31 2024 Dirk Müller <dmueller@suse.com>
- update to 2024-08-01:
* Updated "ServerMediaSession::generateSDPDescription()" to
treat "time_t" as (long long).
* Thu Jul 18 2024 Dirk Müller <dmueller@suse.com>
- update to 2024-06-26:
* Updated the "OnDemandServerMediaSubsession" implementation to
output an error message if the "sink->startPlaying()" call failed
(e.g., due to its source not being compatible with the sink).
This makes some common errors (e.g, a proper 'framer' not
being used) easier to detect.
- update to 2024-05-30:
* Fixed a mistake that caused the config file
"config.raspberrypi" to not appear in the distribution.
- update to 2024-05-15:
* Added a new config file "config.raspberrypi" that is known to
work for building the code on/for a Raspberry Pi 5.
- update to 2024-05-05:
* Updated "QuickTimeFileSink" to add support for recording H.265
video streams. (This is not fully working yet; it appears to
have some bugs.)
- update to 2024-04-19:
* Updated "MPEG2TransportStreamFramer" to ignore big jumps (2x or
more) in the estimate for the duration of each Transport
packet.
This is likely caused by an unexpected jump in the PCR (not
indicated by "discontinuity_indicator").
- update to 2024-03-08:
* Changed "ServerTLSState::setup()" (in "TLSState.cpp") to call
"SSL_CTX_use_certificate_chain_file()" instead of
"SSL_CTX_use_certificate_file()", to allow the server operator to
specify a chain of certificates, rather than just one.
- update to 2024.02.28:
* Updated the code for "dateHeader()" (in "RTSPCommon.cpp") to
avoid using "strftime()", because that can produce a localized
date string that violates the RTSP specification
(which uses section 3.3.1 of RFC 2068 (the HTTP/1.1
specification) to define the "Date:" header).
- update to 2024.02.23:
* Updated the code for "dateHeader()" (in "RTSPCommon.cpp") to use
"NULL" instead of "nullptr"; the latter was causing compilation
problems for someone.
- update to 2024.02.15:
* Updated the RTCP implementation so that reception stats for a
SSRC are no longer deleted, even if a SSRC is reaped due to RTCP
inactivity (no RTCP "SR" reports received recently).
* Thu Jul 18 2024 Dirk Müller <dmueller@suse.com>
- update to 2024.
* Fri Mar 01 2024 pgajdos@suse.com
- Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN
* Sun Jan 14 2024 Takashi Iwai <tiwai@suse.com>
- update up to 2023.11.30:
* In the implementation of the "MPEGVideoStreamFramer" class, gave
"TimeCode::operator==()" the "const" qualifier, to make some
compilers happy.
* Performed the annual update of the copyright years near the start
of each file
- update to 2023.11.08:
* Changed the signature to the virtual function
"getRTPSinkandRTCP()" (in "ServerMediaSubession", and its subclasses
"OnDemandServerMediaSession" and "PassiveServerMediaSubsession")
to make its 'result' arguments "rtpSink" and "rtcp" no longer "const *".
There was no real reason to make those "const *".
- update to 2023.11.07:
* In the class "GenericMediaServer", made the variables
"fServerMediaSessions",
"fClientConnections", and "fClientSessions" 'protected' rather
than 'private', to allow subclasses to access them if desired.
- update to 2023.10.30:
* Fixed a bug in "deleteEventTrigger()" that had accidentally been
introduced during the change to 'event trigger' implementation
back in June.
- update to 2023.07.24:
* Updated the event trigger implementation once again, to allow for
the possibility of developers redefining MAX_NUM_EVENT_TRIGGERS
(it must always be <= the number of bits in an "EventTriggerId",
though.
- update to 2023.06.20:
* Updated the event trigger implementation again - in the case where
"NO_STD_LIB" is defined. In this case,
"fTriggersAwaitingHandling" is implemented as an array of "Boolean
volatile"s, rather than as a 32-bit bitmap. This should make
'race conditions' less likely even if "NO_STD_LIB" is defined
(though you should use the preferred, default implementation -
that uses an array of "std::atomic_flag"s - if possible).
- update to 2023.06.16:
* Changed the (default) implementation of 'event triggers' in
"BasicTaskScheduler" to implement "fTriggersAwaitingHandling"
using "std:atomic_flag"s, rather than as a bitmap.
This should overcome 'race conditions' that some users experienced
when calling "triggerEvent()" from a non-LIVE555 thread.
* Note that this is the first time the LIVE555 code has required the
C++ standard library.
(If you cannot use the C++ standard library, then you can compile
the code - but getting the old behavior - by defining "NO_STD_LIB".)
* Minor change to "RTSPCommon.cpp" to overcome a compilation error
in XCode on Mac OS X.
- update to 2023.06.14:
* Fixed a bug in the Matroska file parsing code that could sometimes
cause a 'use after free' error. (bsc#1218758, CVE-2023-20573)
- update to 2023.06.10:
* Minor change to "GroupsockHelper.cpp" to overcome a compilation
error in XCode on Mac OS X.
- update to 2023.06.08:
* Updated the "dateHeader()" function in "RTSPCommon.cpp" to use
"gmtime_r()" instead of the older, non-thread-safe "gmtime()".
- Applied workarounds for the build error with atomic_flag test
* Mon May 29 2023 Dirk Müller <dmueller@suse.com>
- update to 2023.5.10:
* Fixed a minor memory leak in the "RTSPServer" code.
* Calls to "send()" and "sendto()" now explicitly take
"MSG_NOSIGNAL" rather than 0 as the 'flags' parameter.
In most systems, 0 seems to work, but apparently not in
Debian Linux.
* Sat Jan 21 2023 Dirk Müller <dmueller@suse.com>
- update to 2023.01.19:
- By default, we no longer compile "groupsock/NetAddress.cpp" for Windows to use
"gethostbyname()", because of a report that this breaks IPv6 name resolution.
* Mon Jan 16 2023 Dirk Müller <dmueller@suse.com>
- update to 2023.01.11:
* Updated the "BasicTaskScheduler"/"DelayQueue" implementation to make the 'token counter'
a field of the task scheduler object, rather than having it be a static variable.
This avoids potential problems if an application uses more than one thread (with each thread
having its own task scheduler).
/usr/lib/libBasicUsageEnvironment.so.2 /usr/lib/libBasicUsageEnvironment.so.2.1.0 /usr/share/licenses/libBasicUsageEnvironment2 /usr/share/licenses/libBasicUsageEnvironment2/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 02:32:54 2026