ELSA-2020-3873

ELSA-2020-3873 - libsrtp security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-10-06

Description

[1.4.4-11.20101004cvs]
- Fix global buffer overflow
Resolves: bz#1301202

- Fix improper handling of CSRC count and extension header length in RTP header
Resolves: bz#1323705

- Fix buffer overflow in application of crypto profiles
Resolves: bz#1141897

Related CVEs

CVE-2015-6360

CVE-2013-2139

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_aarch64_beta
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_aarch64_latest
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_aarch64_optional_beta
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_aarch64_optional_latest
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_aarch64_u9_base
	libsrtp-1.4.4-11.20101004cvs.el7.aarch64.rpm	0260df759afde55e426b1f77b7b252f500ed7927cd729d4817a945a1d7228c30	-	ol7_aarch64_beta
	libsrtp-1.4.4-11.20101004cvs.el7.aarch64.rpm	0260df759afde55e426b1f77b7b252f500ed7927cd729d4817a945a1d7228c30	-	ol7_aarch64_latest
	libsrtp-1.4.4-11.20101004cvs.el7.aarch64.rpm	0260df759afde55e426b1f77b7b252f500ed7927cd729d4817a945a1d7228c30	-	ol7_aarch64_u9_base
	libsrtp-devel-1.4.4-11.20101004cvs.el7.aarch64.rpm	e5a742a1b2e6110fc9fd421e6118cda5141d55d8228a3b9db1d890aa3dc88589	-	ol7_aarch64_optional_beta
	libsrtp-devel-1.4.4-11.20101004cvs.el7.aarch64.rpm	e5a742a1b2e6110fc9fd421e6118cda5141d55d8228a3b9db1d890aa3dc88589	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_x86_64_beta
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_x86_64_latest
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_x86_64_optional_latest
	libsrtp-1.4.4-11.20101004cvs.el7.src.rpm	e66fa76ccd3bba0c7a9795b4df1cfe4fa6cf4ba55be0e4098a4997e49542deb1	-	ol7_x86_64_u9_base
	libsrtp-1.4.4-11.20101004cvs.el7.i686.rpm	e1b28cde147827b821d7133e160d08d764ad17adbb75881384be6367f5672b6b	-	ol7_x86_64_beta
	libsrtp-1.4.4-11.20101004cvs.el7.i686.rpm	e1b28cde147827b821d7133e160d08d764ad17adbb75881384be6367f5672b6b	-	ol7_x86_64_latest
	libsrtp-1.4.4-11.20101004cvs.el7.i686.rpm	e1b28cde147827b821d7133e160d08d764ad17adbb75881384be6367f5672b6b	-	ol7_x86_64_u9_base
	libsrtp-1.4.4-11.20101004cvs.el7.x86_64.rpm	b9c1314b9acf0303493fe066d5c633721bb0c2f13b8b085b5dac5a7043f8b761	-	ol7_x86_64_beta
	libsrtp-1.4.4-11.20101004cvs.el7.x86_64.rpm	b9c1314b9acf0303493fe066d5c633721bb0c2f13b8b085b5dac5a7043f8b761	-	ol7_x86_64_latest
	libsrtp-1.4.4-11.20101004cvs.el7.x86_64.rpm	b9c1314b9acf0303493fe066d5c633721bb0c2f13b8b085b5dac5a7043f8b761	-	ol7_x86_64_u9_base
	libsrtp-devel-1.4.4-11.20101004cvs.el7.i686.rpm	6409880e945889f389ae194aff41f9863c4f39a21962f4515aebb82286a0033b	-	ol7_x86_64_optional_beta
	libsrtp-devel-1.4.4-11.20101004cvs.el7.i686.rpm	6409880e945889f389ae194aff41f9863c4f39a21962f4515aebb82286a0033b	-	ol7_x86_64_optional_latest
	libsrtp-devel-1.4.4-11.20101004cvs.el7.x86_64.rpm	d7e8979f703d6f23dccc92802005c5fc423bfe0395b134e0014baaaca7953870	-	ol7_x86_64_optional_beta
	libsrtp-devel-1.4.4-11.20101004cvs.el7.x86_64.rpm	d7e8979f703d6f23dccc92802005c5fc423bfe0395b134e0014baaaca7953870	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team