Bug 13833

Summary:	[CVE 21] dav1d 0.9.2 CVEs found
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Yury <y.tumanov>
Component:	System (kernel, glibc, systemd, bash, PAM...)	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED DUPLICATE	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	e.kosachev, pastordidi, s.matveev, victorr2007, y.tumanov
Version:	All	Flags:	pastordidi: qa_verified- pastordidi: secteam_verified-
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	CVE-2023-32570,
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Yury 2023-10-18 20:24:55 MSK

Please patch CVEs for package dav1d version 0.9.2
  
INFO (CVEs are): dav1d 0.9.2
 cves found
CVE-2023-32570
Desc: VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-32570
Severity: MEDIUM

Comment 1 VictorR2007 2023-10-19 15:53:27 MSK

Обновлен в баге
https://bugzilla.rosalinux.ru/show_bug.cgi?id=13511

Comment 2 Yury 2023-10-19 22:53:12 MSK

secteam_verified

Comment 3 Dmitry Postnikov 2023-10-20 12:34:05 MSK


*** This bug has been marked as a duplicate of bug 13701 ***