SUSE-SU-2022:1436-1

Details

Description of the patch:

This update for libaom fixes the following issues:

CVE-2021-30473: AOMedia in aom_image.c frees memory that is not located on the heap (bsc#1185778).

Affected Packages

libaom0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Desktop Applications 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.0.0-150200.3.12.1

aom-tools

openSUSE Leap 15.3

Fixed in:

1.0.0-150200.3.12.1

libaom-devel

openSUSE Leap 15.3

Fixed in:

1.0.0-150200.3.12.1

libaom-devel-doc

openSUSE Leap 15.3

Fixed in:

1.0.0-150200.3.12.1

libaom0-32bit

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

1.0.0-150200.3.12.1

References

ADVISORY

https://bugzilla.suse.com/1185778

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-April/010852.html

ADVISORY

https://www.suse.com/security/cve/CVE-2021-30473/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20221436-1/