ALT-PU-2024-2955

Высокий

ALT-PU-2024-2955: package dav1d update to version 1.4.0-alt1

Источник

errata.altlinux.org

Дата публикации

12.03.2024

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades dav1d to version 1.4.0-alt1.

Устраненные уязвимости3

BDU:2024-04901

Средний 5.9

Дата публикации: 01.07.2024

Уязвимость декодера dav1d операционных систем iOS, iPadOS, visionOS, macOS, Fedora, браузера Safari, позволяющая нарушителю выполнить произвольный код

CVSS 3.1

Средний 5.9

AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Attack vector: Adjacent_network
Complexity: High
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: High
Availability: Low

CVSS 2.0

Средний 5.5

AV:A/AC:H/Au:S/C:P/I:C/A:P

Access vector: Adjacent_network
Complexity: High
Authentication: Single
Confidentiality: Partial
Integrity: Complete
Availability: Partial

Ссылки

BDU:2024-04901 https://bdu.fstec.ru/vul/2024-04901

Ссылки1

ALT-PU-2024-2955 https://errata.altlinux.org/ALT-PU-2024-2955

Связанные уязвимости

CVE-2023-32570

CVSS3: 5.9

ubuntu

больше 3 лет назад

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

CVE-2023-32570

CVSS3: 5.9

nvd

больше 3 лет назад

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

CVE-2023-32570

msrc

9 месяцев назад

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

CVE-2023-32570

CVSS3: 5.9

debian

больше 3 лет назад

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that ca ...

CVE-2024-1580

CVSS3: 8.8

ubuntu

больше 2 лет назад

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.