Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0964-1

Опубликовано: 21 мар. 2024
Источник: suse-cvrf

Описание

Security update for dav1d

This update for dav1d fixes the following issues:

  • CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).

Список пакетов

SUSE Linux Enterprise Module for Desktop Applications 15 SP5
dav1d-devel-1.0.0-150500.3.6.1
libdav1d6-1.0.0-150500.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP5
dav1d-1.0.0-150500.3.6.1
openSUSE Leap 15.5
dav1d-1.0.0-150500.3.6.1
dav1d-devel-1.0.0-150500.3.6.1
libdav1d6-1.0.0-150500.3.6.1
libdav1d6-32bit-1.0.0-150500.3.6.1

Ссылки

Описание

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP5:dav1d-devel-1.0.0-150500.3.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libdav1d6-1.0.0-150500.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP5:dav1d-1.0.0-150500.3.6.1
openSUSE Leap 15.5:dav1d-1.0.0-150500.3.6.1
Ссылки