Package
ffmpeg-fips-7.1-libavutil59
Component
ffmpeg-fips-7.1-libavutil59
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit e7cbfd1c507b57a806a5825b87d609963e862c8c (avcodec/lcldec: zero the not-decoded tail to avoid heap disclosure), which has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fixed upstream by commit e7cbfd1c507b57a806a5825b87d609963e862c8c (avcodec/lcldec: zero the not-decoded tail to avoid heap disclosure), which has been cherry-picked onto the release/9.0 branch only and shipped in n9.0. No patch release carrying the fix has been published for the 7.1 series: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status