An update for dav1d is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP2,openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-2614 Final 1.0 1.0 2025-10-31 Initial 2025-10-31 2025-10-31 openEuler SA Tool V1.0 2025-10-31 dav1d security update An update for dav1d is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP2,openEuler-20.03-LTS-SP4 dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness. Security Fix(es): An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.(CVE-2024-1580) An update for dav1d is now available for openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP2,openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High dav1d https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2614 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-1580 https://nvd.nist.gov/vuln/detail/CVE-2024-1580 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP2 openEuler-20.03-LTS-SP4 dav1d-0.5.2-4.oe2203sp3.aarch64.rpm dav1d-debuginfo-0.5.2-4.oe2203sp3.aarch64.rpm dav1d-debugsource-0.5.2-4.oe2203sp3.aarch64.rpm libdav1d-0.5.2-4.oe2203sp3.aarch64.rpm libdav1d-devel-0.5.2-4.oe2203sp3.aarch64.rpm dav1d-0.5.2-4.oe2203sp4.aarch64.rpm dav1d-debuginfo-0.5.2-4.oe2203sp4.aarch64.rpm dav1d-debugsource-0.5.2-4.oe2203sp4.aarch64.rpm libdav1d-0.5.2-4.oe2203sp4.aarch64.rpm libdav1d-devel-0.5.2-4.oe2203sp4.aarch64.rpm dav1d-0.5.2-4.oe2403.aarch64.rpm dav1d-debuginfo-0.5.2-4.oe2403.aarch64.rpm dav1d-debugsource-0.5.2-4.oe2403.aarch64.rpm libdav1d-0.5.2-4.oe2403.aarch64.rpm libdav1d-devel-0.5.2-4.oe2403.aarch64.rpm dav1d-0.5.2-4.oe2403sp1.aarch64.rpm dav1d-debuginfo-0.5.2-4.oe2403sp1.aarch64.rpm dav1d-debugsource-0.5.2-4.oe2403sp1.aarch64.rpm libdav1d-0.5.2-4.oe2403sp1.aarch64.rpm libdav1d-devel-0.5.2-4.oe2403sp1.aarch64.rpm dav1d-0.5.2-4.oe2403sp2.aarch64.rpm dav1d-debuginfo-0.5.2-4.oe2403sp2.aarch64.rpm dav1d-debugsource-0.5.2-4.oe2403sp2.aarch64.rpm libdav1d-0.5.2-4.oe2403sp2.aarch64.rpm libdav1d-devel-0.5.2-4.oe2403sp2.aarch64.rpm dav1d-0.5.2-3.oe2003sp4.aarch64.rpm dav1d-debuginfo-0.5.2-3.oe2003sp4.aarch64.rpm dav1d-debugsource-0.5.2-3.oe2003sp4.aarch64.rpm libdav1d-0.5.2-3.oe2003sp4.aarch64.rpm libdav1d-devel-0.5.2-3.oe2003sp4.aarch64.rpm dav1d-0.5.2-4.oe2203sp3.src.rpm dav1d-0.5.2-4.oe2203sp4.src.rpm dav1d-0.5.2-4.oe2403.src.rpm dav1d-0.5.2-4.oe2403sp1.src.rpm dav1d-0.5.2-4.oe2403sp2.src.rpm dav1d-0.5.2-3.oe2003sp4.src.rpm dav1d-0.5.2-4.oe2203sp3.x86_64.rpm dav1d-debuginfo-0.5.2-4.oe2203sp3.x86_64.rpm dav1d-debugsource-0.5.2-4.oe2203sp3.x86_64.rpm libdav1d-0.5.2-4.oe2203sp3.x86_64.rpm libdav1d-devel-0.5.2-4.oe2203sp3.x86_64.rpm dav1d-0.5.2-4.oe2203sp4.x86_64.rpm dav1d-debuginfo-0.5.2-4.oe2203sp4.x86_64.rpm dav1d-debugsource-0.5.2-4.oe2203sp4.x86_64.rpm libdav1d-0.5.2-4.oe2203sp4.x86_64.rpm libdav1d-devel-0.5.2-4.oe2203sp4.x86_64.rpm dav1d-0.5.2-4.oe2403.x86_64.rpm dav1d-debuginfo-0.5.2-4.oe2403.x86_64.rpm dav1d-debugsource-0.5.2-4.oe2403.x86_64.rpm libdav1d-0.5.2-4.oe2403.x86_64.rpm libdav1d-devel-0.5.2-4.oe2403.x86_64.rpm dav1d-0.5.2-4.oe2403sp1.x86_64.rpm dav1d-debuginfo-0.5.2-4.oe2403sp1.x86_64.rpm dav1d-debugsource-0.5.2-4.oe2403sp1.x86_64.rpm libdav1d-0.5.2-4.oe2403sp1.x86_64.rpm libdav1d-devel-0.5.2-4.oe2403sp1.x86_64.rpm dav1d-0.5.2-4.oe2403sp2.x86_64.rpm dav1d-debuginfo-0.5.2-4.oe2403sp2.x86_64.rpm dav1d-debugsource-0.5.2-4.oe2403sp2.x86_64.rpm libdav1d-0.5.2-4.oe2403sp2.x86_64.rpm libdav1d-devel-0.5.2-4.oe2403sp2.x86_64.rpm dav1d-0.5.2-3.oe2003sp4.x86_64.rpm dav1d-debuginfo-0.5.2-3.oe2003sp4.x86_64.rpm dav1d-debugsource-0.5.2-3.oe2003sp4.x86_64.rpm libdav1d-0.5.2-3.oe2003sp4.x86_64.rpm libdav1d-devel-0.5.2-3.oe2003sp4.x86_64.rpm An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d. 2025-10-31 CVE-2024-1580 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP2 openEuler-20.03-LTS-SP4 High 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H dav1d security update 2025-10-31 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2614