Bugzilla – Bug 1189497
VUL-0: CVE-2021-30475: libaom: Buffer overflow in aom_dsp/noise_model.c
Last modified: 2022-03-25 09:06:15 UTC
rh#1968017 aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. References: https://aomedia.googlesource.com/aom/+/12adc723acf02633595a4d8da8345742729f46c0 https://bugs.chromium.org/p/aomedia/issues/detail?id=2999 References: https://bugzilla.redhat.com/show_bug.cgi?id=1968017 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-30475 https://bugs.chromium.org/p/aomedia/issues/detail?id=2999 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30475 https://aomedia.googlesource.com/aom/+/12adc723acf02633595a4d8da8345742729f46c0 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4/
tracking as affected: - SUSE:SLE-15-SP2:Update/libaom
this seems to be tied to the encoder for av1 mainly, lowering priority again
devel project: https://build.opensuse.org/request/show/914191 15sp2: https://build.suse.de/request/show/248808 I believe all fixed.
# maintenance_jira_update_notice SUSE-SU-2021:3005-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1189497 CVE References: CVE-2021-30475 JIRA References: Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): libaom-1.0.0-3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): libaom-1.0.0-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
# maintenance_jira_update_notice openSUSE-SU-2021:3005-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1189497 CVE References: CVE-2021-30475 JIRA References: Sources used: openSUSE Leap 15.3 (src): libaom-1.0.0-3.3.1
# maintenance_jira_update_notice openSUSE-SU-2021:1254-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1189497 CVE References: CVE-2021-30475 JIRA References: Sources used: openSUSE Leap 15.2 (src): libaom-1.0.0-lp152.3.3.1
done