Re: [BLFS Trac] #23419: libde265-1.1.1

#23419: libde265-1.1.1
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * owner:  Joe Locash => SecurityAdvisory
 * priority:  normal => elevated
 * status:  assigned => new

Comment:

 {{{
 v1.1.1 - speed improvements

 The decoding speed has been improved by about 8% on x86 CPUs thanks to
 more SIMD acceleration and optimized CABAC code. Also the startup time has
 been improved, which gives a 3% speed improvement when decoding HEIC files
 with similar-sized tiles.

 Build differences
     When building shared-libraries in Release mode, we are now using
 -fvisibility=hidden by default. You can override this with the new cmake
 option "FORCE_FULL_VISIBILITY".

 Security
     CVE TBD (GHSA-ccfw-29x7-rrx3) - Pixel accessor signed integer overflow
 causes heap OOB read/write
     CVE TBD (GHSA-j2qq-x2xq-g9wr) - SAO sequential filter heap buffer
 overflow via signed integer overflow
 }}}
 Fixed at 3146ff69e3. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23419#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page