Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 833581 - <media-libs/libaom-3.3.0: Multiple vulnerabilities
Summary: <media-libs/libaom-3.3.0: Multiple vulnerabilities
Status: IN_PROGRESS
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor
Assignee: Gentoo Security
URL:
Whiteboard: B3 [glsa? cleanup]
Keywords:
Depends on: 834977
Blocks:
  Show dependency tree
 
Reported: 2022-02-18 00:23 UTC by Sam James
Modified: 2022-03-18 01:15 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-02-18 00:23:33 UTC
From 3.3.0 changelog:
  - Bug Fixes
    * Issue 3163: Segmentation fault when using --enable-keyframe-filtering=2
    * Issue 2436: Integer overflow in av1_warp_affine_c()
    * Issue 3226: armv7 build failure due to gcc-11
    * Issue 3195: Bug report on libaom (AddressSanitizer: heap-buffer-overflow)
    * Issue 3191: Bug report on libaom (AddressSanitizer: SEGV on unknown
      address)
    * Issue 3176: Some SSE2/SADx4AvgTest.* tests fail on Windows
    * Issue 3175: Some SSE2/SADSkipTest.* tests fail on Windows

The ASAN stuff is probably security relevant.
Comment 1 Larry the Git Cow gentoo-dev 2022-02-18 00:40:08 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7dfca15ce0df2ea18e739b88edef84f0d0803710

commit 7dfca15ce0df2ea18e739b88edef84f0d0803710
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-02-18 00:23:38 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-02-18 00:24:08 +0000

    media-libs/libaom: add 3.3.0
    
    Bug: https://bugs.gentoo.org/833581
    Signed-off-by: Sam James <sam@gentoo.org>

 media-libs/libaom/Manifest            |  1 +
 media-libs/libaom/libaom-3.3.0.ebuild | 82 +++++++++++++++++++++++++++++++++++
 media-libs/libaom/libaom-9999.ebuild  |  6 +--
 3 files changed, 85 insertions(+), 4 deletions(-)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-03-18 01:15:24 UTC
Please cleanup