{"id":"CVE-2023-39929","aliases":["AZL-48840","EUVD-2023-43627","GHSA-4jmf-2ggr-ph9x","OESA-2024-1689","SUSE-SU-2025:1451-1","SUSE-SU-2025:1452-1","SUSE-SU-2025:1453-1","SUSE-SU-2025:1477-1","UBUNTU-CVE-2023-39929"],"status":"published","title":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may...","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00243,"percentile":0.15586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-427"],"published":"2024-05-16T20:47:35Z","modified":"2026-08-18T01:17:23Z","fixes":[{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libva","fixed_in":["2.20.0-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libva","fixed_in":["2.20.0-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libva","fixed_in":["2.20.0-1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libva","fixed_in":["2.20.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libva","fixed_in":["2.20.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libva","fixed_in":["2.20.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libva","fixed_in":["2.20.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libva","fixed_in":["2.20.0-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libva","fixed_in":["2.20.0-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libva","fixed_in":["2.20.0-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libva","fixed_in":["2.20.0-150400.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libva","fixed_in":["2.20.0-150500.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libva","fixed_in":["2.20.0-150500.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libva","fixed_in":["2.20.0-150500.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libva","fixed_in":["2.20.0-150500.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libva","fixed_in":["2.20.0-3.3.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libva","fixed_in":["2.20.0-3.3.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.11.0-143"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150400.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150500.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150500.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150500.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-150500.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.3.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.3.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-3","1.2.1-2","1.3.0-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.0-1","1.6.1-1","1.6.2-1","1.6.2-2","1.7.0-1","1.7.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2","2.0.0-2","2.1.0-1","2.1.0-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0-1","2.5.0-2","2.6.0-1","2.6.1-1","2.7.0-1","2.7.0-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libva","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.0-2","2.13.0-1","2.14.0-1"]}],"products":[{"vendor":"intel","product":"libva"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html","tags":["x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39929","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4jmf-2ggr-ph9x"},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1689","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251451-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202828","tags":["report"]},{"url":"https://bugzilla.suse.com/1217770","tags":["report"]},{"url":"https://bugzilla.suse.com/1224413","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39929","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251452-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251453-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251477-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39929","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-39929","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T20:47:35.322Z","modified":"2024-09-06T19:47:26.556Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:35:33.462059Z"}],"euvd":[{"id":"EUVD-2023-43627","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T20:47:35Z","modified":"2024-09-06T19:47:26Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:56:01.134485Z"}],"ghsa":[{"id":"GHSA-4jmf-2ggr-ph9x","title":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may...","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T21:31:59Z","modified":"2024-05-16T21:31:59Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:57:22.29356Z"}],"nvd":[{"id":"CVE-2023-39929","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T21:15:53.42Z","modified":"2026-06-17T06:12:58.753Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:09:15.329996Z"}],"osv":[{"id":"OESA-2024-1689","title":"libva security update","description":"Libva is an implementation for VA-API, which is an open-source library and API specification, provides access to graphics hardware acceleration capabilities for video processing. It consists of a main library and driver-specific acceleration backends for each supported hardware vendor.\r\n\r\nSecurity Fix(es):\r\n\r\nUncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.(CVE-2023-39929)","status":"published","published":"2024-06-07T11:07:09Z","modified":"2026-08-18T01:17:23.070066679Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"UBUNTU-CVE-2023-39929","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T21:15:00Z","modified":"2026-04-22T14:10:44.34576Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"AZL-48840","title":"CVE-2023-39929 affecting package libva 2.11.0-143","description":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-05-16T21:15:53Z","modified":"2026-04-21T04:29:41.586468Z","updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"SUSE-SU-2025:1451-1","title":"Security update for libva","description":"This update for libva fixes the following issues:\n\nUpdate to libva version 2.20.0, which includes security fix for:\n\n* uncontrolled search path may allow an authenticated user to\n  escalate privilege via local access (CVE-2023-39929,\n  bsc#1224413, jsc#PED-11066)\n\nThis includes latest version of one of the components needed for Video\n(processing) hardware support on Intel GPUs (bsc#1217770)\n\nUpdate to version 2.20.0:\n\n  * av1: Revise offsets comments for av1 encode\n  * drm:\n    - Limit the array size to avoid out of range\n    - Remove no longer used helpers\n  * jpeg: add support for crop and partial decode\n  * trace:\n    - Add trace for vaExportSurfaceHandle\n    - Unlock mutex before return\n    - Fix minor issue about printf data type and value range\n  * va/backend:\n    - Annotate vafool as deprecated\n    - Document the vaGetDriver* APIs\n  * va/x11/va_fglrx: Remove some dead code\n  * va/x11/va_nvctrl: Remove some dead code\n  * va:\n    - Add new VADecodeErrorType to indicate the reset happended in\n      the driver\n    - Add vendor string on va_TraceInitialize\n    - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)\n    - Drop no longer applicable vaGetDriverNames check\n    - Fix:don't leak driver names, when override is set\n    - Fix:set driver number to be zero if vaGetDriverNames failed\n    - Optimize code of getting driver name for all protocols/os\n      (wayland,x11,drm,win32,android)\n    - Remove legacy code paths\n    - Remove unreachable 'DRIVER BUG'\n  * win32:\n    - Only print win32 driver messages in DEBUG builds\n    - Remove duplicate adapter_luid entry\n  * x11/dri2: limit the array handling to avoid out of range access\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var\n    - Implement vaGetDriverNames\n    - Remove legacy code paths\n\nUpdate to 2.19.0:\n\n  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1\n  * add: Enable support for license acquisition of multiple protected\n    playbacks\n  * fix: use secure_getenv instead of getenv\n  * trace: Improve and add VA trace log for AV1 encode\n  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.\n\nUpdate to version 2.18.0:\n\n  * doc: Add build and install libva informatio in home page.\n  * fix:\n    - Add libva.def into distribution package\n    - NULL check before calling strncmp.\n    - Remove reference to non-existent symbol\n  * meson: docs:\n    - Add encoder interface for av1\n    - Use libva_version over project_version()\n  * va:\n    - Add VAProfileH264High10\n    - Always build with va-messaging API\n    - Fix the codying style of CHECK_DISPLAY\n    - Remove Android pre Jelly Bean workarounds\n    - Remove dummy isValid() hook\n    - Remove unused drm_sarea.h include \u0026 ANDROID references in\n      va_dricommon.h\n    - va/sysdeps.h: remove Android section\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var\n    - Use LIBVA_DRI3_DISABLE in GetNumCandidates\n\nUpdate to 2.17.0:\n\n  * win: Simplify signature for driver name loading\n  * win: Rewrite driver registry query and fix some\n    bugs/leaks/inefficiencies\n  * win: Add missing null check after calloc\n  * va: Update security disclaimer\n  * dep:remove the file .cvsignore\n  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx\n  * meson: add 'with-legacy' for emgd, nvctrl and fglrx\n  * x11: move all FGLRX code to va_fglrx.c\n  * x11: move all NVCTRL code to va_nvctrl.c\n  * meson: stop using deprecated meson.source_root()\n  * meson: stop using configure_file copy=true\n  * va: correctly include the win32 (local) headers\n  * win: clean-up the coding style\n  * va: dos2unix all the files\n  * drm: remove unnecessary dri2 version/extension query\n  * trace: annotate internal functions with DLL_HIDDEN\n  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_\n    support level attribute instead\n  * meson: Check support for -Wl,-version-script and build link_args\n    accordingly\n  * meson: Set va_win32 soversion to '' and remove the install_data rename\n  * fix: resouce check null\n  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes\n  * va_trace: va_TraceSurfaceAttributes should check the\n    VASurfaceAttribMemoryType\n  * va: Adds Win32 Node and Windows build support\n  * va: Adds compat_win32 abstraction for Windows build and prepares va\n    common code for windows build\n  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled\n  * meson: Add with_win32 option, makes libdrm non-mandatory on Win\n  * x11: add basic DRI3 support\n  * drm: remove VA_DRM_IsRenderNodeFd() helper\n  * drm: add radeon drm + radeonsi mesa combo\n\nNeeded for jira#PED-1174 (Video decoding/encoding support (VA-API,\n...) for Intel GPUs is outside of Mesa)\n\nUpdate to 2.16.0:\n\n  * add: Add HierarchicalFlag \u0026 hierarchical_level_plus1 for AV1e.\n  * dep: Update README.md to remove badge links\n  * dep: Removed waffle-io badge from README to fix broken link\n  * dep: Drop mailing list, IRC and Slack\n  * autotools: use wayland-scanner private-code\n  * autotools: use the wayland-scanner.pc to locate the prog\n  * meson: use wayland-scanner private-code\n  * meson: request native wayland-scanner\n  * meson: use the wayland-scanner.pc to locate the prog\n  * meson: set HAVE_VA_X11 when applicable\n  * style:Correct slight coding style in several new commits\n  * trace: add Linux ftrace mode for va trace\n  * trace: Add missing pthread_mutex_destroy\n  * drm: remove no-longer needed X == X mappings\n  * drm: fallback to drm driver name == va driver name\n  * drm: simplify the mapping table\n  * x11: simplify the mapping table\n\nUpdate to version 2.15.0 was part of Intel oneVPL GPU Runtime 2022Q2 Release 22.4.4\n\nUpdate to 2.15.0:\n\n  * Add: new display HW attribute to report PCI ID\n  * Add: sample depth related parameters for AV1e\n  * Add: refresh_frame_flags for AV1e\n  * Add: missing fields in va_TraceVAEncSequenceParameterBufferHEVC.\n  * Add: nvidia-drm to the drm driver map\n  * Add: type and buffer for delta qp per block\n  * Deprecation: remove the va_fool support\n  * Fix:Correct the version of meson build on master branch\n  * Fix:X11 DRI2: check if device is a render node\n  * Build:Use also strong stack protection if supported\n  * Trace:print the string for profile/entrypoint/configattrib\n\nUpdate to 2.14.0:\n\n  * add: Add av1 encode interfaces\n  * add: VA/X11 VAAPI driver mapping for crocus DRI driver\n  * doc: Add description of the fd management for surface importing\n  * ci: fix freebsd build\n  * meson: Copy public headers to build directory to support subproject\n  \nUpdate to 2.13.0\n\n  * add new surface format fourcc XYUV\n  * Fix av1 dec doc page link issue\n  * unify the code styles using the style_unify script\n  * Check the function pointer before using (fixes github issue#536)\n  * update NEWS for 2.13.0\n\nUpdate to 2.12.0:\n\n  * add: Report the capability of vaCopy support\n  * add: Report the capability of sub device\n  * add: Add config attributes to advertise HEVC/H.265 encoder features\n  * add: Video processing HVS Denoise: Added 4 modes\n  * add: Introduce VASurfaceAttribDRMFormatModifiers\n  * add: Add 3DLUT Filter in Video Processing.\n  * doc: Update log2_tile_column description for vp9enc\n  * trace: Correct av1 film grain trace information\n  * ci: Fix freebsd build by switching to vmactions/freebsd-vm@v0.1.3\n\nUpdate to 2.11.0:\n\n  * add: LibVA Protected Content API\n  * add: Add a configuration attribute to advertise AV1d LST feature\n  * fix: wayland: don't try to authenticate with render nodes\n  * autotools: use shell grouping instead of sed to prepend a line\n  * trace: Add details data dump for mpeg2 IQ matrix.\n  * doc: update docs for VASurfaceAttribPixelFormat\n  * doc: Libva documentation edit for AV1 reference frames\n  * doc: Modify AV1 frame_width_minus1 and frame_height_minus1 comment\n  * doc: Remove tile_rows and tile_cols restriction to match AV1 spec\n  * doc: Format code for doxygen output\n  * doc: AV1 decode documentation edit for superres_scale_denominator\n  * ci: upgrade FreeBSD to 12.2\n  * ci: disable travis build\n  * ci: update cache before attempting to install packages\n  * ci: avoid running workloads on other workloads changes\n  * ci: enable github actions \n\n- CVE-2023-39929: Fixed an issue where an uncontrolled search path may allow authenticated users to escalate privilege via local access. (bsc#1224413)\n","status":"published","published":"2025-05-05T07:43:40Z","modified":"2026-02-04T03:40:53.337284Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1452-1","title":"Security update for libva","description":"This update for libva fixes the following issues:\n\nUpdate to libva version 2.20.0, which includes security fix for:\n\n- CVE-2023-39929: Uncontrolled search path may allow an authenticated\n  user to escalate privilege via local access (bsc#1224413, jsc#PED-11066)\n\nThis includes latest version of one of the components needed for\nVideo (processing) hardware support on Intel GPUs (bsc#1217770)\n\nUpdate to version 2.20.0:\n\n  * av1: Revise offsets comments for av1 encode\n  * drm:\n    - Limit the array size to avoid out of range\n    - Remove no longer used helpers\n  * jpeg: add support for crop and partial decode\n  * trace:\n    - Add trace for vaExportSurfaceHandle\n    - Unlock mutex before return\n    - Fix minor issue about printf data type and value range\n  * va/backend:\n    - Annotate vafool as deprecated\n    - Document the vaGetDriver* APIs\n  * va/x11/va_fglrx: Remove some dead code\n  * va/x11/va_nvctrl: Remove some dead code\n  * va:\n    - Add new VADecodeErrorType to indicate the reset happended in\n      the driver\n    - Add vendor string on va_TraceInitialize\n    - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)\n    - Drop no longer applicable vaGetDriverNames check\n    - Fix:don't leak driver names, when override is set\n    - Fix:set driver number to be zero if vaGetDriverNames failed\n    - Optimize code of getting driver name for all protocols/os\n      (wayland,x11,drm,win32,android)\n    - Remove legacy code paths\n    - Remove unreachable 'DRIVER BUG'\n  * win32:\n    - Only print win32 driver messages in DEBUG builds\n    - Remove duplicate adapter_luid entry\n  * x11/dri2: limit the array handling to avoid out of range access\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var\n    - Implement vaGetDriverNames\n    - Remove legacy code paths\n\nUpdate to 2.19.0:\n\n  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1\n  * add: Enable support for license acquisition of multiple protected\n    playbacks\n  * fix: use secure_getenv instead of getenv\n  * trace: Improve and add VA trace log for AV1 encode\n  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.\n\nUpdate to version 2.18.0:\n\n  * doc: Add build and install libva informatio in home page.\n  * fix:\n    - Add libva.def into distribution package\n    - NULL check before calling strncmp.\n    - Remove reference to non-existent symbol\n  * meson: docs:\n    - Add encoder interface for av1\n    - Use libva_version over project_version()\n  * va:\n    - Add VAProfileH264High10\n    - Always build with va-messaging API\n    - Fix the codying style of CHECK_DISPLAY\n    - Remove Android pre Jelly Bean workarounds\n    - Remove dummy isValid() hook\n    - Remove unused drm_sarea.h include \u0026 ANDROID references in\n      va_dricommon.h\n    - va/sysdeps.h: remove Android section\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var\n    - Use LIBVA_DRI3_DISABLE in GetNumCandidates\n\nupdate to 2.17.0:\n\n  * win: Simplify signature for driver name loading\n  * win: Rewrite driver registry query and fix some\n    bugs/leaks/inefficiencies\n  * win: Add missing null check after calloc\n  * va: Update security disclaimer\n  * dep:remove the file .cvsignore\n  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx\n  * meson: add 'with-legacy' for emgd, nvctrl and fglrx\n  * x11: move all FGLRX code to va_fglrx.c\n  * x11: move all NVCTRL code to va_nvctrl.c\n  * meson: stop using deprecated meson.source_root()\n  * meson: stop using configure_file copy=true\n  * va: correctly include the win32 (local) headers\n  * win: clean-up the coding style\n  * va: dos2unix all the files\n  * drm: remove unnecessary dri2 version/extension query\n  * trace: annotate internal functions with DLL_HIDDEN\n  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_\n    support level attribute instead\n  * meson: Check support for -Wl,-version-script and build link_args\n    accordingly\n  * meson: Set va_win32 soversion to '' and remove the install_data rename\n  * fix: resouce check null\n  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes\n  * va_trace: va_TraceSurfaceAttributes should check the\n    VASurfaceAttribMemoryType\n  * va: Adds Win32 Node and Windows build support\n  * va: Adds compat_win32 abstraction for Windows build and prepares va\n    common code for windows build\n  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled\n  * meson: Add with_win32 option, makes libdrm non-mandatory on Win\n  * x11: add basic DRI3 support\n  * drm: remove VA_DRM_IsRenderNodeFd() helper\n  * drm: add radeon drm + radeonsi mesa combo\n\n- needed for jira#PED-1174 (Video decoding/encoding support \n  (VA-API, ...) for Intel GPUs is outside of Mesa)\n\nUpdate to 2.16.0:\n\n  * add: Add HierarchicalFlag \u0026 hierarchical_level_plus1 for AV1e.\n  * dep: Update README.md to remove badge links\n  * dep: Removed waffle-io badge from README to fix broken link\n  * dep: Drop mailing list, IRC and Slack\n  * autotools: use wayland-scanner private-code\n  * autotools: use the wayland-scanner.pc to locate the prog\n  * meson: use wayland-scanner private-code\n  * meson: request native wayland-scanner\n  * meson: use the wayland-scanner.pc to locate the prog\n  * meson: set HAVE_VA_X11 when applicable\n  * style:Correct slight coding style in several new commits\n  * trace: add Linux ftrace mode for va trace\n  * trace: Add missing pthread_mutex_destroy\n  * drm: remove no-longer needed X == X mappings\n  * drm: fallback to drm driver name == va driver name\n  * drm: simplify the mapping table\n  * x11: simplify the mapping table\n\nUpdate to version 2.15.0 was part of Intel oneVPL GPU Runtime 2022Q2 Release 22.4.4\n\nUpdate to 2.15.0:\n\n  * Add: new display HW attribute to report PCI ID\n  * Add: sample depth related parameters for AV1e\n  * Add: refresh_frame_flags for AV1e\n  * Add: missing fields in va_TraceVAEncSequenceParameterBufferHEVC.\n  * Add: nvidia-drm to the drm driver map\n  * Add: type and buffer for delta qp per block\n  * Deprecation: remove the va_fool support\n  * Fix:Correct the version of meson build on master branch\n  * Fix:X11 DRI2: check if device is a render node\n  * Build:Use also strong stack protection if supported\n  * Trace:print the string for profile/entrypoint/configattrib\n\nUpdate to 2.14.0:\n\n  * add: Add av1 encode interfaces\n  * add: VA/X11 VAAPI driver mapping for crocus DRI driver\n  * doc: Add description of the fd management for surface importing\n  * ci: fix freebsd build\n  * meson: Copy public headers to build directory to support subproject\n\n- CVE-2023-39929: Fixed an issue where an uncontrolled search path may allow authenticated users to escalate privilege via local access. (bsc#1224413) \n","status":"published","published":"2025-05-05T07:43:59Z","modified":"2026-02-04T04:36:59.814746Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1453-1","title":"Security update for libva","description":"This update for libva fixes the following issues:\n\nUpdate to libva version 2.20.0, which includes security fix for:\n\n* CVE-2023-39929: uncontrolled search path may allow an authenticated user to\n  escalate privilege via local access (bsc#1224413, jsc#PED-11066)\n\nThis includes latest version of one of the components needed for Video\n(processing) hardware support on Intel GPUs (bsc#1217770)\n\nUpdate to version 2.20.0:\n\n  * av1: Revise offsets comments for av1 encode\n  * drm:\n\n    - Limit the array size to avoid out of range\n    - Remove no longer used helpers\n\n  * jpeg: add support for crop and partial decode\n  * trace:\n\n    - Add trace for vaExportSurfaceHandle\n    - Unlock mutex before return\n    - Fix minor issue about printf data type and value range\n\n  * va/backend:\n\n    - Annotate vafool as deprecated\n    - Document the vaGetDriver* APIs\n\n  * va/x11/va_fglrx: Remove some dead code\n  * va/x11/va_nvctrl: Remove some dead code\n  * va:\n\n    - Add new VADecodeErrorType to indicate the reset happended in\n      the driver\n    - Add vendor string on va_TraceInitialize\n    - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)\n    - Drop no longer applicable vaGetDriverNames check\n    - Fix:don't leak driver names, when override is set\n    - Fix:set driver number to be zero if vaGetDriverNames failed\n    - Optimize code of getting driver name for all protocols/os\n      (wayland,x11,drm,win32,android)\n    - Remove legacy code paths\n    - Remove unreachable 'DRIVER BUG'\n\n  * x11/dri2: limit the array handling to avoid out of range access\n  * x11:\n\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var\n    - Implement vaGetDriverNames\n    - Remove legacy code paths\n\nUpdate to 2.19.0:\n\n  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1\n  * add: Enable support for license acquisition of multiple protected\n    playbacks\n  * fix: use secure_getenv instead of getenv\n  * trace: Improve and add VA trace log for AV1 encode\n  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.\n\nUpdate to version 2.18.0:\n\n  * doc: Add build and install libva informatio in home page.\n  * fix:\n\n    - Add libva.def into distribution package\n    - NULL check before calling strncmp.\n    - Remove reference to non-existent symbol\n\n  * meson: docs:\n\n    - Add encoder interface for av1\n    - Use libva_version over project_version()\n\n  * va:\n\n    - Add VAProfileH264High10\n    - Always build with va-messaging API\n    - Fix the codying style of CHECK_DISPLAY\n    - Remove Android pre Jelly Bean workarounds\n    - Remove dummy isValid() hook\n    - Remove unused drm_sarea.h include \u0026 ANDROID references in\n      va_dricommon.h\n    - va/sysdeps.h: remove Android section\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var\n\n    - Use LIBVA_DRI3_DISABLE in GetNumCandidates\n\n- Add libva-wayland to baselibs.conf, now that its build have moved\n  to the main part of spec, source validator should no longer\n  complain on SLE.\n\nUpdate to 2.17.0:\n\n  * win: Simplify signature for driver name loading\n  * win: Rewrite driver registry query and fix some\n    bugs/leaks/inefficiencies\n  * win: Add missing null check after calloc\n  * va: Update security disclaimer\n  * dep:remove the file .cvsignore\n  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx\n  * meson: add 'with-legacy' for emgd, nvctrl and fglrx\n  * x11: move all FGLRX code to va_fglrx.c\n  * x11: move all NVCTRL code to va_nvctrl.c\n  * meson: stop using deprecated meson.source_root()\n  * meson: stop using configure_file copy=true\n  * va: correctly include the win32 (local) headers\n  * win: clean-up the coding style\n  * va: dos2unix all the files\n  * drm: remove unnecessary dri2 version/extension query\n  * trace: annotate internal functions with DLL_HIDDEN\n  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_\n    support level attribute instead\n  * meson: Check support for -Wl,-version-script and build link_args\n    accordingly\n  * meson: Set va_win32 soversion to '' and remove the install_data rename\n  * fix: resouce check null\n  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes\n  * va_trace: va_TraceSurfaceAttributes should check the\n    VASurfaceAttribMemoryType\n  * va: Adds Win32 Node and Windows build support\n  * va: Adds compat_win32 abstraction for Windows build and prepares va\n    common code for windows build\n  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled\n  * meson: Add with_win32 option, makes libdrm non-mandatory on Win\n  * x11: add basic DRI3 support\n  * drm: remove VA_DRM_IsRenderNodeFd() helper\n  * drm: add radeon drm + radeonsi mesa combo\n","status":"published","published":"2025-05-05T07:44:16Z","modified":"2026-02-04T03:47:21.9143Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1477-1","title":"Security update for libva","description":"This update for libva fixes the following issues:\n\nUpdate to libva version 2.20.0, which includes security fix for:\n\n* uncontrolled search path may allow an authenticated user to\n  escalate privilege via local access (CVE-2023-39929,\n  bsc#1224413, jsc#PED-11066)\n\nThis includes latest version of one of the components needed for Video\n(processing) hardware support on Intel GPUs (bsc#1217770)\n\nUpdate to version 2.20.0:\n\n  * av1: Revise offsets comments for av1 encode\n  * drm:\n    - Limit the array size to avoid out of range\n    - Remove no longer used helpers\n  * jpeg: add support for crop and partial decode\n  * trace:\n    - Add trace for vaExportSurfaceHandle\n    - Unlock mutex before return\n    - Fix minor issue about printf data type and value range\n  * va/backend:\n    - Annotate vafool as deprecated\n    - Document the vaGetDriver* APIs\n  * va/x11/va_fglrx: Remove some dead code\n  * va/x11/va_nvctrl: Remove some dead code\n  * va:\n    - Add new VADecodeErrorType to indicate the reset happended in\n      the driver\n    - Add vendor string on va_TraceInitialize\n    - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4)\n    - Drop no longer applicable vaGetDriverNames check\n    - Fix:don't leak driver names, when override is set\n    - Fix:set driver number to be zero if vaGetDriverNames failed\n    - Optimize code of getting driver name for all protocols/os\n      (wayland,x11,drm,win32,android)\n    - Remove legacy code paths\n    - Remove unreachable 'DRIVER BUG'\n  * win32:\n    - Only print win32 driver messages in DEBUG builds\n    - Remove duplicate adapter_luid entry\n  * x11/dri2: limit the array handling to avoid out of range access\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var\n    - Implement vaGetDriverNames\n    - Remove legacy code paths\n\nUpdate to 2.19.0:\n\n  * add: Add mono_chrome to VAEncSequenceParameterBufferAV1\n  * add: Enable support for license acquisition of multiple protected\n    playbacks\n  * fix: use secure_getenv instead of getenv\n  * trace: Improve and add VA trace log for AV1 encode\n  * trace: Unify va log message, replace va_TracePrint with va_TraceMsg.\n\nUpdate to version 2.18.0:\n\n  * doc: Add build and install libva informatio in home page.\n  * fix:\n    - Add libva.def into distribution package\n    - NULL check before calling strncmp.\n    - Remove reference to non-existent symbol\n  * meson: docs:\n    - Add encoder interface for av1\n    - Use libva_version over project_version()\n  * va:\n    - Add VAProfileH264High10\n    - Always build with va-messaging API\n    - Fix the codying style of CHECK_DISPLAY\n    - Remove Android pre Jelly Bean workarounds\n    - Remove dummy isValid() hook\n    - Remove unused drm_sarea.h include \u0026 ANDROID references in\n      va_dricommon.h\n    - va/sysdeps.h: remove Android section\n  * x11:\n    - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var\n    - Use LIBVA_DRI3_DISABLE in GetNumCandidates\n\nUpdate to 2.17.0:\n\n  * win: Simplify signature for driver name loading\n  * win: Rewrite driver registry query and fix some\n    bugs/leaks/inefficiencies\n  * win: Add missing null check after calloc\n  * va: Update security disclaimer\n  * dep:remove the file .cvsignore\n  * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx\n  * meson: add 'with-legacy' for emgd, nvctrl and fglrx\n  * x11: move all FGLRX code to va_fglrx.c\n  * x11: move all NVCTRL code to va_nvctrl.c\n  * meson: stop using deprecated meson.source_root()\n  * meson: stop using configure_file copy=true\n  * va: correctly include the win32 (local) headers\n  * win: clean-up the coding style\n  * va: dos2unix all the files\n  * drm: remove unnecessary dri2 version/extension query\n  * trace: annotate internal functions with DLL_HIDDEN\n  * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_\n    support level attribute instead\n  * meson: Check support for -Wl,-version-script and build link_args\n    accordingly\n  * meson: Set va_win32 soversion to '' and remove the install_data rename\n  * fix: resouce check null\n  * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes\n  * va_trace: va_TraceSurfaceAttributes should check the\n    VASurfaceAttribMemoryType\n  * va: Adds Win32 Node and Windows build support\n  * va: Adds compat_win32 abstraction for Windows build and prepares va\n    common code for windows build\n  * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled\n  * meson: Add with_win32 option, makes libdrm non-mandatory on Win\n  * x11: add basic DRI3 support\n  * drm: remove VA_DRM_IsRenderNodeFd() helper\n  * drm: add radeon drm + radeonsi mesa combo\n\nNeeded for jira#PED-1174 (Video decoding/encoding support (VA-API,\n...) for Intel GPUs is outside of Mesa)\n\nupdate to 2.16.0:\n\n  * add: Add HierarchicalFlag \u0026 hierarchical_level_plus1 for AV1e.\n  * dep: Update README.md to remove badge links\n  * dep: Removed waffle-io badge from README to fix broken link\n  * dep: Drop mailing list, IRC and Slack\n  * autotools: use wayland-scanner private-code\n  * autotools: use the wayland-scanner.pc to locate the prog\n  * meson: use wayland-scanner private-code\n  * meson: request native wayland-scanner\n  * meson: use the wayland-scanner.pc to locate the prog\n  * meson: set HAVE_VA_X11 when applicable\n  * style:Correct slight coding style in several new commits\n  * trace: add Linux ftrace mode for va trace\n  * trace: Add missing pthread_mutex_destroy\n  * drm: remove no-longer needed X == X mappings\n  * drm: fallback to drm driver name == va driver name\n  * drm: simplify the mapping table\n  * x11: simplify the mapping table\n\nUpdate to version 2.15.0 was part of Intel oneVPL GPU Runtime 2022Q2\nRelease 22.4.4\n\nUpdate to 2.15.0:\n\n  * Add: new display HW attribute to report PCI ID\n  * Add: sample depth related parameters for AV1e\n  * Add: refresh_frame_flags for AV1e\n  * Add: missing fields in va_TraceVAEncSequenceParameterBufferHEVC.\n  * Add: nvidia-drm to the drm driver map\n  * Add: type and buffer for delta qp per block\n  * Deprecation: remove the va_fool support\n  * Fix:Correct the version of meson build on master branch\n  * Fix:X11 DRI2: check if device is a render node\n  * Build:Use also strong stack protection if supported\n  * Trace:print the string for profile/entrypoint/configattrib\n\nUpdate to 2.14.0:\n\n  * add: Add av1 encode interfaces\n  * add: VA/X11 VAAPI driver mapping for crocus DRI driver\n  * doc: Add description of the fd management for surface importing\n  * ci: fix freebsd build\n  * meson: Copy public headers to build directory to support subproject\n  \nUpdate to 2.13.0:\n\n  * add new surface format fourcc XYUV\n  * Fix av1 dec doc page link issue\n  * unify the code styles using the style_unify script\n  * Check the function pointer before using (fixes github issue#536)\n  * update NEWS for 2.13.0\n\nupdate to 2.12.0:\n\n  * add: Report the capability of vaCopy support\n  * add: Report the capability of sub device\n  * add: Add config attributes to advertise HEVC/H.265 encoder features\n  * add: Video processing HVS Denoise: Added 4 modes\n  * add: Introduce VASurfaceAttribDRMFormatModifiers\n  * add: Add 3DLUT Filter in Video Processing.\n  * doc: Update log2_tile_column description for vp9enc\n  * trace: Correct av1 film grain trace information\n  * ci: Fix freebsd build by switching to vmactions/freebsd-vm@v0.1.3\n\nupdate to 2.11.0:\n\n  * add: LibVA Protected Content API\n  * add: Add a configuration attribute to advertise AV1d LST feature\n  * fix: wayland: don't try to authenticate with render nodes\n  * autotools: use shell grouping instead of sed to prepend a line\n  * trace: Add details data dump for mpeg2 IQ matrix.\n  * doc: update docs for VASurfaceAttribPixelFormat\n  * doc: Libva documentation edit for AV1 reference frames\n  * doc: Modify AV1 frame_width_minus1 and frame_height_minus1 comment\n  * doc: Remove tile_rows and tile_cols restriction to match AV1 spec\n  * doc: Format code for doxygen output\n  * doc: AV1 decode documentation edit for superres_scale_denominator\n  * ci: upgrade FreeBSD to 12.2\n  * ci: disable travis build\n  * ci: update cache before attempting to install packages\n  * ci: avoid running workloads on other workloads changes\n  * ci: enable github actions \n\nupdate to 2.10.0:\n\n  * add: Pass offset and size of pred_weight_table\n  * add: add vaCopy interface to copy surface and buffer\n  * add: add definition for different execution\n  * add: New parameters for transport controlled BRC were added\n  * add: add FreeBSD support\n  * add: add a bufer type to adjust context priority dynamically\n  * fix: correct the api version in meson.build\n  * fix: remove deprecated variable from va_trace.c\n  * fix: Use va_deprecated for the deprecate variable\n  * fix: Mark chroma_sample_position as deprecated\n  * doc: va_dec_av1: clarifies CDEF syntax element packing\n  * doc: [AV1] Update documented ranges for loop filter and quantization params.\n  * doc: Update va.h for multi-threaded usages\n  * trace: va/va_trace: ignore system gettid() on Linux\n    \nUpdate to 2.9.1:\n\n  * fix version mismatch between meson and autotools \n\nUpdate to 2.9.0:\n\n  * trace: Refine the va_TraceVAPictureParameterBufferAV1.\n  * doc: Add comments for backward/forward reference to avoid confusion\n  * doc: Modify comments in av1 decoder interfaces\n  * doc: Update mailing list\n  * Add SCC fields trace for HEVC SCC encoding.\n  * Add FOURCC code for Y212 and Y412 format.\n  * Add interpolation method for scaling.\n  * add attributes for context priority setting\n  * Add vaSyncBuffer for output buffers synchronization\n  * Add vaSyncSurface2 with timeout\n \nUpdate to 2.8.0:\n\n  * trace: enable return value trace for successful function call\n  * trace: divide va_TraceEndPicture to two seperate function\n  * trace: add support for VAProfileHEVCSccMain444_10\n  * fix:Fixes file descriptor leak\n  * add fourcc code for P012 format\n  * travis: Add a test that code files don't have the exec bit set\n  * Remove the execute bit from all source code files\n  * meson: Allow for libdir and includedir to be absolute paths\n  * trace: Fix format string warnings\n  * fix:Fix clang warning (reading garbage)\n  * add definition to enforce both reflist not empty\n  * trace: List correct field names in va_TraceVAPictureParameterBufferHEVC\n  * change the return value to be UNIMPLEMENTED when the function pointer is NULL\n  * remove check of vaPutSurface implementation\n  * Add new slice structure flag for CAPS reporting\n  * VA/X11: VAAPI driver mapping for iris DRI driver\n  * VA/X11: enable driver candidate selection for DRI2\n  * Add SCC flags to enable/disable features\n  * fix: Fix HDR10 MaxCLL and MaxFALL documentation\n  * Add VAProfileHEVCSccMain444_10 for HEVC\n  * change the compatible list to be dynamic one\n  * trace:Convert VAProfileAV1Profile0 VAProfileAV1Profile1 to string\n\nUpdate to version 2.7.0:\n\n  * trace: av1 decode buffers trace\n  * trace: Add HEVC REXT and SCC trace for decoding.\n  * Add av1 decode interfaces\n  * Fix crashes on system without supported hardware by PR #369.\n  * Add 2 FourCC for 10bit RGB(without Alpha) format: X2R10G10B10\n    and X2B10G10R10.\n  * Fix android build issue #365 and remove some trailing\n    whitespace\n  * Adjust call sequence to ensure authenticate operation is\n    executed to fix #355\n\nUpdate to version 2.6.1:\n\n  * adjust call sequence to ensure authenticate operation is\n    executed this patch is not needed for media-driver, but\n    needed for i965 driver which check authentication. \n\nUpdate to version 2.6.0:\n\n  * enable the mutiple driver selection logic and enable it for DRM.\n  * drm: Add iHD to driver_name_map\n  * Add missed slice parameter 'slice_data_num_emu_prevn_bytes'\n  * ensure that all meson files are part of the release tarball\n  * configure: use correct comparison operator\n  * trace: support VAConfigAttribMultipleFrame in trace\n  * remove incorrect field of VAConfigAttribValDecJPEG\n  * va/va_trace: Dump VP9 parameters for profile 1~3\n  * add multiple frame capability report\n  * add variable to indicate layer infromation\n  * trace: fix memory leak on closing the trace\n  * add prediction direction caps report\n  * Add comments for colour primaries and transfer characteristics in VAProcColorProperties\n\nThis release is needed for latest intel-media-driver update (jsc#SLE-8838)\n\nUpdate to version 2.5.0:\n\n  * Correct the comment of color_range.\n  * Add VA_FOURCC_A2B10G10R10 for format a2b10g10r10.\n  * Adjust VAEncMiscParameterQuantization structure to be align with VAEncMiscParameterBuffer(possible to impact BC)\n  * Add attribute for max frame size\n  * Add va_footer.html into distribution build\n  * va_trace: hevc profiles added\n  * Add new definition for input/output surface flag\n  * va/va_trace: add trace support for VAEncMiscParameterTypeSkipFrame structure.\n  * va/va_trace: add MPEG2 trace support for MiscParam and SequenceParam\n  * va_openDriver: check strdup return value\n  * Mark some duplicated field as deprecated\n  * Add return value into logs\n  * va/va_trace: add trace support for VAEncMiscParameterEncQuality structure.\n  * Add newformat foucc defination\n  * va_backend: remove unneeded linux/videodev2.h include\n  * va_trace: add missing \u003csys/time.h\u003e include\n  * configure: don't build glx if VA/X11 isn't built\n  * va/va_trace: unbreak with C89 after b369467\n  * [common] Add A2RGB10 fourcc definition\n  * build: meson: enables va messaging and visibility\n  * va/va_trace: add trace support for RIR(rolling intra refresh).\n  * va/va_trace: add trace support for ROI(region of interest)\n\nUpdate to version 2.4.1:\n\n  * [common] Add A2RGB10 fourcc definition.\n  * build: meson: enables va messaging and visibility.\n  * va/va_trace:\n    - Add trace support for RIR(rolling intra refresh).\n    - Add trace support for ROI(region of interest).\n\nUpdate to version 2.4.0:\n\n  * va_TraceSurface support for VA_FOURCC_P010\n  * Add pointer to struct wl_interface for driver to use\n  * (integrate) va: fix new line symbol in error message\n  * av: avoid driver path truncation\n  * Fix compilation warning (uninit and wrong variable types) for\n    Android O MR1\n  * Allow import of the DRM PRIME 2 memory type\n  * android: ignore unimportant compile warnnings\n  * compile: fix sign/unsign compare in va_trace.c\n  * android: replace utils/Log.h with log/log.h\n  * High Dynamic Range Tone Mapping: Add a new filter for input\n    metadata and some comments\n  * Remove restrictions on vaSetDriverName()\n\n  ","status":"published","published":"2025-05-06T09:17:15Z","modified":"2026-03-23T04:47:05.903112Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}