SUSE Package Hub - openSUSE-2021-1004

Update Info

openSUSE-2021-1004

Security update for live555

Type: security

Severity: moderate

Issued: 2021-07-08

Description:

This update for live555 fixes the following issues:

Update to 2021.05.22:

- Lots of fixes and updates, including the security fix for CVE-2021-28899 (boo#1185874)
  and CVE-2019-15232 (boo#1146283).  See the list in http://live555.com/liveMedia/public/changelog.txt

References

CVE: CVE-2021-28899
CVE: CVE-2019-15232
Bugzilla: 1185874 VUL-1: CVE-2021-28899: live555: Vulnerability in the Networks LIVE555 Streaming Media before 2021.3.16
Bugzilla: 1146283 VUL-1: CVE-2019-15232: live555: before 2019.08.16 has a Use-After-Free because GenericMediaServer:createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska demuxer

Packages

live555-2021.05.22-bp153.2.3.1