Package
ffmpeg-fips-7.1-dev
Component
ffmpeg-fips-7.1-dev
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7 (avcodec/rscc: do not leave uninitilized data when the input is too short) for an uninitialized heap read in the RSCC decoder on truncated input. The fix has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fix committed upstream (commit cd1f545) for an uninitialized heap read in the RSCC decoder on truncated input; no point release containing it has been tagged yet.
Status