SUSE-SU-2024:1468-1

Опубликовано: 29 апр. 2024

Источник: suse-cvrf

Описание

Security update for ffmpeg

This update for ffmpeg fixes the following issues:

CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070)
CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235)

Adding references for already fixed issues:

CVE-2021-38091: Fixed integer overflow in function filter16_sobel in libavfilter/vf_convolution.c (bsc#1190732)
CVE-2021-38090: Fixed integer overflow in function filter16_roberts in libavfilter/vf_convolution.c (bsc#1190731)
CVE-2020-20898: Fixed integer overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c (bsc#1190724)
CVE-2020-20901: Fixed buffer overflow vulnerability in function filter_frame in libavfilter/vf_fieldorder.c (bsc#1190728)
CVE-2020-20900: Fixed buffer overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190727)
CVE-2020-20894: Fixed buffer Overflow vulnerability in function gaussian_blur in libavfilter/vf_edgedetect.c (bsc#1190721)

Список пакетов

SUSE Enterprise Storage 7.1

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

libavcodec57-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

ffmpeg-3.4.2-150200.11.41.1

libavdevice57-3.4.2-150200.11.41.1

libavfilter6-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libavcodec57-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

SUSE Linux Enterprise Workstation Extension 15 SP5

libavcodec-devel-3.4.2-150200.11.41.1

libavformat-devel-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

openSUSE Leap 15.5

ffmpeg-3.4.2-150200.11.41.1

ffmpeg-private-devel-3.4.2-150200.11.41.1

libavcodec-devel-3.4.2-150200.11.41.1

libavcodec57-3.4.2-150200.11.41.1

libavcodec57-32bit-3.4.2-150200.11.41.1

libavdevice-devel-3.4.2-150200.11.41.1

libavdevice57-3.4.2-150200.11.41.1

libavdevice57-32bit-3.4.2-150200.11.41.1

libavfilter-devel-3.4.2-150200.11.41.1

libavfilter6-3.4.2-150200.11.41.1

libavfilter6-32bit-3.4.2-150200.11.41.1

libavformat-devel-3.4.2-150200.11.41.1

libavformat57-3.4.2-150200.11.41.1

libavformat57-32bit-3.4.2-150200.11.41.1

libavresample-devel-3.4.2-150200.11.41.1

libavresample3-3.4.2-150200.11.41.1

libavresample3-32bit-3.4.2-150200.11.41.1

libavutil-devel-3.4.2-150200.11.41.1

libavutil55-3.4.2-150200.11.41.1

libavutil55-32bit-3.4.2-150200.11.41.1

libpostproc-devel-3.4.2-150200.11.41.1

libpostproc54-3.4.2-150200.11.41.1

libpostproc54-32bit-3.4.2-150200.11.41.1

libswresample-devel-3.4.2-150200.11.41.1

libswresample2-3.4.2-150200.11.41.1

libswresample2-32bit-3.4.2-150200.11.41.1

libswscale-devel-3.4.2-150200.11.41.1

libswscale4-3.4.2-150200.11.41.1

libswscale4-32bit-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241468-1/
Link for SUSE-SU-2024:1468-1
https://lists.suse.com/pipermail/sle-updates/2024-April/035126.html
E-Mail link for SUSE-SU-2024:1468-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1190721
SUSE Bug 1190721
https://bugzilla.suse.com/1190724
SUSE Bug 1190724
https://bugzilla.suse.com/1190727
SUSE Bug 1190727
https://bugzilla.suse.com/1190728
SUSE Bug 1190728
https://bugzilla.suse.com/1190731
SUSE Bug 1190731
https://bugzilla.suse.com/1190732
SUSE Bug 1190732
https://bugzilla.suse.com/1223070
SUSE Bug 1223070
https://bugzilla.suse.com/1223235
SUSE Bug 1223235
https://www.suse.com/security/cve/CVE-2020-20894/
SUSE CVE CVE-2020-20894 page
https://www.suse.com/security/cve/CVE-2020-20898/
SUSE CVE CVE-2020-20898 page
https://www.suse.com/security/cve/CVE-2020-20900/
SUSE CVE CVE-2020-20900 page
https://www.suse.com/security/cve/CVE-2020-20901/
SUSE CVE CVE-2020-20901 page
https://www.suse.com/security/cve/CVE-2021-38090/
SUSE CVE CVE-2021-38090 page
https://www.suse.com/security/cve/CVE-2021-38091/
SUSE CVE CVE-2021-38091 page
https://www.suse.com/security/cve/CVE-2021-38094/
SUSE CVE CVE-2021-38094 page
https://www.suse.com/security/cve/CVE-2023-49502/
SUSE CVE CVE-2023-49502 page
https://www.suse.com/security/cve/CVE-2024-31578/
SUSE CVE CVE-2024-31578 page

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-20894.html
CVE-2020-20894
https://bugzilla.suse.com/1190721
SUSE Bug 1190721

Описание

Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-20898.html
CVE-2020-20898
https://bugzilla.suse.com/1190724
SUSE Bug 1190724

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22032. Reason: This candidate is a duplicate of CVE-2020-22032. Notes: All CVE users should reference CVE-2020-22032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-20900.html
CVE-2020-20900
https://bugzilla.suse.com/1190727
SUSE Bug 1190727

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22022. Reason: This candidate is a duplicate of CVE-2020-22022. Notes: All CVE users should reference CVE-2020-22022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-20901.html
CVE-2020-20901
https://bugzilla.suse.com/1190728
SUSE Bug 1190728

Описание

Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-38090.html
CVE-2021-38090
https://bugzilla.suse.com/1190731
SUSE Bug 1190731

Описание

Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-38091.html
CVE-2021-38091
https://bugzilla.suse.com/1190732
SUSE Bug 1190732

Описание

Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-38094.html
CVE-2021-38094
https://bugzilla.suse.com/1190735
SUSE Bug 1190735

Описание

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-49502.html
CVE-2023-49502
https://bugzilla.suse.com/1223235
SUSE Bug 1223235

Описание

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.

Затронутые продукты

SUSE Enterprise Storage 7.1:libavcodec57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavformat57-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample-devel-3.4.2-150200.11.41.1

SUSE Enterprise Storage 7.1:libavresample3-3.4.2-150200.11.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-31578.html
CVE-2024-31578
https://bugzilla.suse.com/1223070
SUSE Bug 1223070

SUSE-SU-2024:1468-1

Описание

Список пакетов

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Workstation Extension 15 SP5

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2020-20894

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-20898

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-20900

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-20901

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-38090

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-38091

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-38094

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-49502

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-31578

Описание

Затронутые продукты

Ссылки