SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2618

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2618

Security update for dav1d

Type: security

Severity: moderate

Issued: 2023-06-23

Description:

This update for dav1d fixes the following issues:

- CVE-2023-32570: Fixed possible crash when decoding a frame (bsc#1211262).

References

CVE: CVE-2023-32570
Bugzilla: 1211262 VUL-0: CVE-2023-32570: dav1d: VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

Packages

dav1d-1.0.0-150500.3.3.1