openSUSE: 2021:4170-1 moderate: libaom
Description
This update for libaom fixes the following issues: - CVE-2020-36129: Fixed stack buffer overflow via the component src/aom_image.c (bsc#1193356). - CVE-2020-36131: Fixed stack buffer overflow via the component stats/rate_hist.c (bsc#1193365). - CVE-2020-36135: Fixed NULL pointer dereference via the component rate_hist.c (bsc#1193366). - CVE-2020-36130: Fixed NULL pointer dereference via the component av1/av1_dx_iface.c (bsc#1193369).
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-4170=1
Package List
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): aom-tools-1.0.0-3.9.1 aom-tools-debuginfo-1.0.0-3.9.1 libaom-debugsource-1.0.0-3.9.1 libaom-devel-1.0.0-3.9.1 libaom0-1.0.0-3.9.1 libaom0-debuginfo-1.0.0-3.9.1 - openSUSE Leap 15.3 (noarch): libaom-devel-doc-1.0.0-3.9.1 - openSUSE Leap 15.3 (x86_64): libaom0-32bit-1.0.0-3.9.1 libaom0-32bit-debuginfo-1.0.0-3.9.1
References
https://www.suse.com/security/cve/CVE-2020-36129.html https://www.suse.com/security/cve/CVE-2020-36130.html https://www.suse.com/security/cve/CVE-2020-36131.html https://www.suse.com/security/cve/CVE-2020-36135.html https://bugzilla.suse.com/1193356 https://bugzilla.suse.com/1193365 https://bugzilla.suse.com/1193366 https://bugzilla.suse.com/1193369