Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3193-1

Опубликовано: 23 сент. 2021
Источник: suse-cvrf

Описание

Security update for ffmpeg

This update for ffmpeg fixes the following issues:

  • CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).

Список пакетов

SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libavcodec57-3.4.2-11.11.1
libavformat57-3.4.2-11.11.1
libavresample-devel-3.4.2-11.11.1
libavresample3-3.4.2-11.11.1
libavresample3-32bit-3.4.2-11.11.1
libavutil-devel-3.4.2-11.11.1
libavutil55-3.4.2-11.11.1
libpostproc-devel-3.4.2-11.11.1
libpostproc54-3.4.2-11.11.1
libswresample-devel-3.4.2-11.11.1
libswresample2-3.4.2-11.11.1
libswscale-devel-3.4.2-11.11.1
libswscale4-3.4.2-11.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP3
libavcodec57-3.4.2-11.11.1
libavformat57-3.4.2-11.11.1
libavresample-devel-3.4.2-11.11.1
libavresample3-3.4.2-11.11.1
libavresample3-64bit-3.4.2-11.11.1
libavutil-devel-3.4.2-11.11.1
libavutil55-3.4.2-11.11.1
libpostproc-devel-3.4.2-11.11.1
libpostproc54-3.4.2-11.11.1
libswresample-devel-3.4.2-11.11.1
libswresample2-3.4.2-11.11.1
libswscale-devel-3.4.2-11.11.1
libswscale4-3.4.2-11.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP2
ffmpeg-3.4.2-11.11.1
libavdevice57-3.4.2-11.11.1
libavfilter6-3.4.2-11.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
ffmpeg-3.4.2-11.11.1
libavdevice57-3.4.2-11.11.1
libavfilter6-3.4.2-11.11.1
SUSE Linux Enterprise Workstation Extension 15 SP2
libavcodec-devel-3.4.2-11.11.1
libavformat-devel-3.4.2-11.11.1
libavresample-devel-3.4.2-11.11.1
libavresample3-3.4.2-11.11.1
SUSE Linux Enterprise Workstation Extension 15 SP3
libavcodec-devel-3.4.2-11.11.1
libavformat-devel-3.4.2-11.11.1
libavresample-devel-3.4.2-11.11.1
libavresample3-3.4.2-11.11.1

Ссылки

Описание

adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavcodec57-3.4.2-11.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavformat57-3.4.2-11.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavresample-devel-3.4.2-11.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavresample3-3.4.2-11.11.1
Ссылки