SUSE-SU-2021:4170-1

Details

Description of the patch:

This update for libaom fixes the following issues:

CVE-2020-36129: Fixed stack buffer overflow via the component src/aom_image.c (bsc#1193356).
CVE-2020-36131: Fixed stack buffer overflow via the component stats/rate_hist.c (bsc#1193365).
CVE-2020-36135: Fixed NULL pointer dereference via the component rate_hist.c (bsc#1193366).
CVE-2020-36130: Fixed NULL pointer dereference via the component av1/av1_dx_iface.c (bsc#1193369).

Affected Packages

libaom0

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

1.0.0-3.9.1

References

ADVISORY

https://bugzilla.suse.com/1193356

ADVISORY

https://bugzilla.suse.com/1193365

ADVISORY

https://bugzilla.suse.com/1193366

ADVISORY

https://bugzilla.suse.com/1193369

ADVISORY