USN-6447-1: AOM vulnerabilities

Releases

• Ubuntu 20.04 LTS

Packages

• aom - AV1 Video Codec Library

Details

It was discovered that AOM incorrectly handled certain inputs. If a user or an
automated system were tricked into opening a specially crafted input file, a
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2020-36130, CVE-2020-36131, CVE-2020-36133, CVE-2020-36135,
CVE-2021-30473, CVE-2021-30474, CVE-2021-30475)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• aom-tools - 1.0.0.errata1-3+deb11u1build0.20.04.1
• libaom-dev - 1.0.0.errata1-3+deb11u1build0.20.04.1
• libaom-doc - 1.0.0.errata1-3+deb11u1build0.20.04.1
• libaom0 - 1.0.0.errata1-3+deb11u1build0.20.04.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2020-36133
• CVE-2021-30475
• CVE-2021-30474
• CVE-2020-36131
• CVE-2021-30473
• CVE-2020-36130
• CVE-2020-36135