Package
ffmpeg-fips-7.1-libavdevice61
Component
ffmpeg-fips-7.1-libavdevice61
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit 705890061467ad550ecc1dad5eea07f28ccfb43e (avcodec/screenpresso: reject deflate output shorter than the frame) for an uninitialized heap read in the Screenpresso decoder on truncated input. The fix has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fix committed upstream (commit 7058900) for an uninitialized heap read in the Screenpresso decoder on truncated input; no point release containing it has been tagged yet.
Status