Re: [BLFS Trac] #23384: libheif-1.23.0

#23384: libheif-1.23.0
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * owner:  Joe Locash => SecurityAdvisory
 * priority:  normal => elevated
 * status:  assigned => new

Comment:

 {{{
 v1.23.0

 This is a smaller release that adds API functions to read and write
 metadata:
     - ambient viewing environment
     - nominal diffuse white luminance

 It also adds a output_image_nclx_profile_passthrough option to
 heif_decoding_options to pass through the input image NCLX without doing
 any internal color conversion.

 Security
     - CVS TBD (GHSA-jvmp-j3cw-84mh) - unbounded heap allocation in HEIF
 sequence parser (stsz fixed-size mode missing bound check)
 }}}
 Fixed at d2f82c9ee5. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23384#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page