SUSE-SU-2024:1907-1

Опубликовано: 03 июн. 2024

Источник: suse-cvrf

Описание

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues:

CVE-2020-22021: Fixed a buffer overflow vulnerability in filter_edges() (bsc#1186586)
CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. (bsc#1223437)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libavcodec58_134-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libavcodec58_134-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

ffmpeg-4-4.4-150400.3.32.1

ffmpeg-4-libavcodec-devel-4.4-150400.3.32.1

ffmpeg-4-libavdevice-devel-4.4-150400.3.32.1

ffmpeg-4-libavfilter-devel-4.4-150400.3.32.1

ffmpeg-4-libavformat-devel-4.4-150400.3.32.1

ffmpeg-4-libavresample-devel-4.4-150400.3.32.1

ffmpeg-4-libavutil-devel-4.4-150400.3.32.1

ffmpeg-4-libpostproc-devel-4.4-150400.3.32.1

ffmpeg-4-libswresample-devel-4.4-150400.3.32.1

ffmpeg-4-libswscale-devel-4.4-150400.3.32.1

ffmpeg-4-private-devel-4.4-150400.3.32.1

libavcodec58_134-4.4-150400.3.32.1

libavdevice58_13-4.4-150400.3.32.1

libavfilter7_110-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavresample4_0-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

libswscale5_9-4.4-150400.3.32.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libavcodec58_134-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libavcodec58_134-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

SUSE Linux Enterprise Workstation Extension 15 SP5

libavcodec58_134-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

libswscale5_9-4.4-150400.3.32.1

openSUSE Leap 15.5

ffmpeg-4-4.4-150400.3.32.1

ffmpeg-4-libavcodec-devel-4.4-150400.3.32.1

ffmpeg-4-libavdevice-devel-4.4-150400.3.32.1

ffmpeg-4-libavfilter-devel-4.4-150400.3.32.1

ffmpeg-4-libavformat-devel-4.4-150400.3.32.1

ffmpeg-4-libavresample-devel-4.4-150400.3.32.1

ffmpeg-4-libavutil-devel-4.4-150400.3.32.1

ffmpeg-4-libpostproc-devel-4.4-150400.3.32.1

ffmpeg-4-libswresample-devel-4.4-150400.3.32.1

ffmpeg-4-libswscale-devel-4.4-150400.3.32.1

ffmpeg-4-private-devel-4.4-150400.3.32.1

libavcodec58_134-4.4-150400.3.32.1

libavcodec58_134-32bit-4.4-150400.3.32.1

libavdevice58_13-4.4-150400.3.32.1

libavdevice58_13-32bit-4.4-150400.3.32.1

libavfilter7_110-4.4-150400.3.32.1

libavfilter7_110-32bit-4.4-150400.3.32.1

libavformat58_76-4.4-150400.3.32.1

libavformat58_76-32bit-4.4-150400.3.32.1

libavresample4_0-4.4-150400.3.32.1

libavresample4_0-32bit-4.4-150400.3.32.1

libavutil56_70-4.4-150400.3.32.1

libavutil56_70-32bit-4.4-150400.3.32.1

libpostproc55_9-4.4-150400.3.32.1

libpostproc55_9-32bit-4.4-150400.3.32.1

libswresample3_9-4.4-150400.3.32.1

libswresample3_9-32bit-4.4-150400.3.32.1

libswscale5_9-4.4-150400.3.32.1

libswscale5_9-32bit-4.4-150400.3.32.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241907-1/
Link for SUSE-SU-2024:1907-1
https://lists.suse.com/pipermail/sle-updates/2024-June/035465.html
E-Mail link for SUSE-SU-2024:1907-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1186586
SUSE Bug 1186586
https://bugzilla.suse.com/1223437
SUSE Bug 1223437
https://www.suse.com/security/cve/CVE-2020-22021/
SUSE CVE CVE-2020-22021 page
https://www.suse.com/security/cve/CVE-2023-51794/
SUSE CVE CVE-2023-51794 page

Описание

Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavcodec58_134-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavformat58_76-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavutil56_70-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libpostproc55_9-4.4-150400.3.32.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-22021.html
CVE-2020-22021
https://bugzilla.suse.com/1186586
SUSE Bug 1186586

Описание

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavcodec58_134-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavformat58_76-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavutil56_70-4.4-150400.3.32.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libpostproc55_9-4.4-150400.3.32.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-51794.html
CVE-2023-51794
https://bugzilla.suse.com/1223437
SUSE Bug 1223437

SUSE-SU-2024:1907-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Workstation Extension 15 SP5

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2020-22021

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-51794

Описание

Затронутые продукты

Ссылки