Opened 4 months ago

Closed 2 months ago

#23419 closed enhancement (fixed)

libde265-1.1.1

Reported by: Bruce Dubbs Owned by: SecurityAdvisory
Priority: elevated Milestone: 98-Security
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by Joe Locash, 4 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:2 by Joe Locash, 4 months ago

Owner: changed from Joe Locash to SecurityAdvisory
Priority: normal → elevated
Status: assigned → new 
v1.1.1 - speed improvements

The decoding speed has been improved by about 8% on x86 CPUs thanks to more SIMD acceleration and optimized CABAC code. Also the startup time has been improved, which gives a 3% speed improvement when decoding HEIC files with similar-sized tiles.

Build differences
    When building shared-libraries in Release mode, we are now using -fvisibility=hidden by default. You can override this with the new cmake option "FORCE_FULL_VISIBILITY".

Security
    CVE TBD (GHSA-ccfw-29x7-rrx3) - Pixel accessor signed integer overflow causes heap OOB read/write
    CVE TBD (GHSA-j2qq-x2xq-g9wr) - SAO sequential filter heap buffer overflow via signed integer overflow

Fixed at 3146ff69e3. Leaving open for SA.

comment:3 by Bruce Dubbs, 3 months ago

Milestone: 13.1 → 98-Security

comment:4 by Bruce Dubbs, 2 months ago

Resolution: → fixed
Status: new → closed

Advisory sa-13.0-161 issued.

Note: See TracTickets for help on using tickets.