Package
ffmpeg-fips-7.1-static
Component
ffmpeg-fips-7.1-static
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit 93f2a525ec6c7b467bae68322720d10188fc6e30 (avcodec/dvbsub_parser: avoid signed overflow in the capacity check) for a signed integer overflow in the DVB subtitle parser. The fix has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fix committed upstream (commit 93f2a52) for a signed integer overflow in the DVB subtitle parser; no point release containing it has been tagged yet.
Status