SUSE-SU-2023:2115-1

Опубликовано: 05 мая 2023

Источник: suse-cvrf

Описание

Security update for ffmpeg

This update for ffmpeg fixes the following issues:

CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754).
CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778).
CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934).

Список пакетов

SUSE Enterprise Storage 6

libavcodec-devel-3.4.2-150000.4.53.2

libavcodec57-3.4.2-150000.4.53.2

libavcodec57-32bit-3.4.2-150000.4.53.2

libavdevice-devel-3.4.2-150000.4.53.2

libavdevice57-3.4.2-150000.4.53.2

libavdevice57-32bit-3.4.2-150000.4.53.2

libavfilter-devel-3.4.2-150000.4.53.2

libavfilter6-3.4.2-150000.4.53.2

libavfilter6-32bit-3.4.2-150000.4.53.2

libavformat-devel-3.4.2-150000.4.53.2

libavformat57-3.4.2-150000.4.53.2

libavformat57-32bit-3.4.2-150000.4.53.2

libavresample-devel-3.4.2-150000.4.53.2

libavresample3-3.4.2-150000.4.53.2

libavresample3-32bit-3.4.2-150000.4.53.2

libavutil-devel-3.4.2-150000.4.53.2

libavutil55-3.4.2-150000.4.53.2

libavutil55-32bit-3.4.2-150000.4.53.2

libpostproc-devel-3.4.2-150000.4.53.2

libpostproc54-3.4.2-150000.4.53.2

libpostproc54-32bit-3.4.2-150000.4.53.2

libswresample-devel-3.4.2-150000.4.53.2

libswresample2-3.4.2-150000.4.53.2

libswresample2-32bit-3.4.2-150000.4.53.2

libswscale-devel-3.4.2-150000.4.53.2

libswscale4-3.4.2-150000.4.53.2

libswscale4-32bit-3.4.2-150000.4.53.2

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libavcodec-devel-3.4.2-150000.4.53.2

libavcodec57-3.4.2-150000.4.53.2

libavcodec57-32bit-3.4.2-150000.4.53.2

libavdevice-devel-3.4.2-150000.4.53.2

libavdevice57-3.4.2-150000.4.53.2

libavdevice57-32bit-3.4.2-150000.4.53.2

libavfilter-devel-3.4.2-150000.4.53.2

libavfilter6-3.4.2-150000.4.53.2

libavfilter6-32bit-3.4.2-150000.4.53.2

libavformat-devel-3.4.2-150000.4.53.2

libavformat57-3.4.2-150000.4.53.2

libavformat57-32bit-3.4.2-150000.4.53.2

libavresample-devel-3.4.2-150000.4.53.2

libavresample3-3.4.2-150000.4.53.2

libavresample3-32bit-3.4.2-150000.4.53.2

libavutil-devel-3.4.2-150000.4.53.2

libavutil55-3.4.2-150000.4.53.2

libavutil55-32bit-3.4.2-150000.4.53.2

libpostproc-devel-3.4.2-150000.4.53.2

libpostproc54-3.4.2-150000.4.53.2

libpostproc54-32bit-3.4.2-150000.4.53.2

libswresample-devel-3.4.2-150000.4.53.2

libswresample2-3.4.2-150000.4.53.2

libswresample2-32bit-3.4.2-150000.4.53.2

libswscale-devel-3.4.2-150000.4.53.2

libswscale4-3.4.2-150000.4.53.2

libswscale4-32bit-3.4.2-150000.4.53.2

SUSE Linux Enterprise Server 15 SP1-LTSS

libavcodec-devel-3.4.2-150000.4.53.2

libavcodec57-3.4.2-150000.4.53.2

libavcodec57-32bit-3.4.2-150000.4.53.2

libavdevice-devel-3.4.2-150000.4.53.2

libavdevice57-3.4.2-150000.4.53.2

libavdevice57-32bit-3.4.2-150000.4.53.2

libavfilter-devel-3.4.2-150000.4.53.2

libavfilter6-3.4.2-150000.4.53.2

libavfilter6-32bit-3.4.2-150000.4.53.2

libavformat-devel-3.4.2-150000.4.53.2

libavformat57-3.4.2-150000.4.53.2

libavformat57-32bit-3.4.2-150000.4.53.2

libavresample-devel-3.4.2-150000.4.53.2

libavresample3-3.4.2-150000.4.53.2

libavresample3-32bit-3.4.2-150000.4.53.2

libavutil-devel-3.4.2-150000.4.53.2

libavutil55-3.4.2-150000.4.53.2

libavutil55-32bit-3.4.2-150000.4.53.2

libpostproc-devel-3.4.2-150000.4.53.2

libpostproc54-3.4.2-150000.4.53.2

libpostproc54-32bit-3.4.2-150000.4.53.2

libswresample-devel-3.4.2-150000.4.53.2

libswresample2-3.4.2-150000.4.53.2

libswresample2-32bit-3.4.2-150000.4.53.2

libswscale-devel-3.4.2-150000.4.53.2

libswscale4-3.4.2-150000.4.53.2

libswscale4-32bit-3.4.2-150000.4.53.2

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libavcodec-devel-3.4.2-150000.4.53.2

libavcodec57-3.4.2-150000.4.53.2

libavcodec57-32bit-3.4.2-150000.4.53.2

libavdevice-devel-3.4.2-150000.4.53.2

libavdevice57-3.4.2-150000.4.53.2

libavdevice57-32bit-3.4.2-150000.4.53.2

libavfilter-devel-3.4.2-150000.4.53.2

libavfilter6-3.4.2-150000.4.53.2

libavfilter6-32bit-3.4.2-150000.4.53.2

libavformat-devel-3.4.2-150000.4.53.2

libavformat57-3.4.2-150000.4.53.2

libavformat57-32bit-3.4.2-150000.4.53.2

libavresample-devel-3.4.2-150000.4.53.2

libavresample3-3.4.2-150000.4.53.2

libavresample3-32bit-3.4.2-150000.4.53.2

libavutil-devel-3.4.2-150000.4.53.2

libavutil55-3.4.2-150000.4.53.2

libavutil55-32bit-3.4.2-150000.4.53.2

libpostproc-devel-3.4.2-150000.4.53.2

libpostproc54-3.4.2-150000.4.53.2

libpostproc54-32bit-3.4.2-150000.4.53.2

libswresample-devel-3.4.2-150000.4.53.2

libswresample2-3.4.2-150000.4.53.2

libswresample2-32bit-3.4.2-150000.4.53.2

libswscale-devel-3.4.2-150000.4.53.2

libswscale4-3.4.2-150000.4.53.2

libswscale4-32bit-3.4.2-150000.4.53.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232115-1/
Link for SUSE-SU-2023:2115-1
https://lists.suse.com/pipermail/sle-security-updates/2023-May/014741.html
E-Mail link for SUSE-SU-2023:2115-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1140754
SUSE Bug 1140754
https://bugzilla.suse.com/1206778
SUSE Bug 1206778
https://bugzilla.suse.com/1209934
SUSE Bug 1209934
https://www.suse.com/security/cve/CVE-2019-13390/
SUSE CVE CVE-2019-13390 page
https://www.suse.com/security/cve/CVE-2022-3341/
SUSE CVE CVE-2022-3341 page
https://www.suse.com/security/cve/CVE-2022-48434/
SUSE CVE CVE-2022-48434 page

Описание

In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c.

Затронутые продукты

SUSE Enterprise Storage 6:libavcodec-devel-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-32bit-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavdevice-devel-3.4.2-150000.4.53.2

Ссылки

https://www.suse.com/security/cve/CVE-2019-13390.html
CVE-2019-13390
https://bugzilla.suse.com/1140754
SUSE Bug 1140754

Описание

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.

Затронутые продукты

SUSE Enterprise Storage 6:libavcodec-devel-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-32bit-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavdevice-devel-3.4.2-150000.4.53.2

Ссылки

https://www.suse.com/security/cve/CVE-2022-3341.html
CVE-2022-3341
https://bugzilla.suse.com/1206778
SUSE Bug 1206778

Описание

libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).

Затронутые продукты

SUSE Enterprise Storage 6:libavcodec-devel-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavcodec57-32bit-3.4.2-150000.4.53.2

SUSE Enterprise Storage 6:libavdevice-devel-3.4.2-150000.4.53.2

Ссылки

https://www.suse.com/security/cve/CVE-2022-48434.html
CVE-2022-48434
https://bugzilla.suse.com/1209934
SUSE Bug 1209934

SUSE-SU-2023:2115-1

Описание

Список пакетов

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2019-13390

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-3341

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-48434

Описание

Затронутые продукты

Ссылки