portage-ng / portage / media-libs / libaom / 9999
portage-ng glsa
1 advisory reference media-libs/libaom · none place version 9999 in a vulnerable range
▸ GLSA 202401-32 libaom: Multiple Vulnerabilities this version unaffected normal local and remote 2024-01-31

Multiple vulnerabilities have been discovered in libaom, the worst of which can lead to remote code execution.

Announced
2024-01-31
Revised
2024-01-31
Access
local and remote
Bugs
#793932 #798126 #828112
Advisory
https://security.gentoo.org/glsa/202401-32

Affected packages

PackageArchVulnerableUnaffected
media-libs/libaom*< 3.2.0>= 3.2.0

Background

libaom is the Alliance for Open Media's AV1 Codec SDK.

Description

Multiple vulnerabilities have been discovered in libaom. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All libaom users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libaom-3.2.0"

References