Package
ffmpeg-fips-7.1
Component
ffmpeg-fips-7.1
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit 2f234ea34c81288e3840fca632dd16481d8de39f (avcodec/tiff: reject inflate output shorter than the strip) for an uninitialized heap read in the TIFF decoder's compressed-strip unpacking. The fix has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fix committed upstream (commit 2f234ea) for an uninitialized heap read in the TIFF decoder's compressed-strip unpacking; no point release containing it has been tagged yet.
Status