[SECURITY] Fedora 34 Update: vmaf-2.1.1-1.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1c3f7963a5
2021-06-16 01:03:31.627581
--------------------------------------------------------------------------------
Name : vmaf
Product : Fedora 34
Version : 2.1.1
Release : 1.fc34
URL : https://github.com/netflix/vmaf
Summary : Video Multi-Method Assessment Fusion
Description :
VMAF is a perceptual video quality assessment algorithm developed by
Netflix. VMAF Development Kit (VDK) is a software package that contains
the VMAF algorithm implementation, as well as a set of tools that allows
a user to train and test a custom VMAF model. For an overview, read this
tech blog post, or this slide deck.
https://github.com/Netflix/vmaf/blob/master/resource/doc/VMAF_ICIP17.pdf
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-30473 Security fix for CVE-2021-30475 ---- Fix bug
with 100% cpu utilization on network link change (or wakeup) when websockets are
in use (well-known "github + polyfill addon and wakeup" issue), and backport
some other improvements from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 10 2021 Leigh Scott <leigh123linux(a)gmail.com> - 2.1.1-1
- Update to 2.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961375 - CVE-2021-30473 libaom: aom_image.c in libaom frees memory that is
not located on the heap
https://bugzilla.redhat.com/show_bug.cgi?id=1961375
[ 2 ] Bug #1968017 - CVE-2021-30475 libaom: Buffer overflow in aom_dsp/noise_model.c
https://bugzilla.redhat.com/show_bug.cgi?id=1968017
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1c3f7963a5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------