SUSE-SU-2025:3715-1

Опубликовано: 22 окт. 2025

Источник: suse-cvrf

Описание

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues:

CVE-2025-59728: allocated space for the appended '/' (bsc#1251137)

Список пакетов

Container containers/open-webui:0

libavcodec58_134-4.4.6-150600.13.33.1

libavdevice58_13-4.4.6-150600.13.33.1

libavfilter7_110-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavresample4_0-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libpostproc55_9-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

Container containers/vllm-openai:0

libavcodec58_134-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

Container suse/kiosk/firefox-esr:latest

libavcodec58_134-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

Container suse/kiosk/xorg-client:latest

libavcodec58_134-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

Image ai_15_6

libavcodec58_134-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

SUSE Linux Enterprise Module for Package Hub 15 SP6

ffmpeg-4-4.4.6-150600.13.33.1

ffmpeg-4-libavcodec-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavdevice-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavfilter-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavformat-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavutil-devel-4.4.6-150600.13.33.1

ffmpeg-4-libpostproc-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswscale-devel-4.4.6-150600.13.33.1

ffmpeg-4-private-devel-4.4.6-150600.13.33.1

libavcodec58_134-4.4.6-150600.13.33.1

libavdevice58_13-4.4.6-150600.13.33.1

libavfilter7_110-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavresample4_0-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libpostproc55_9-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

ffmpeg-4-4.4.6-150600.13.33.1

ffmpeg-4-libavcodec-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavdevice-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavfilter-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavformat-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavutil-devel-4.4.6-150600.13.33.1

ffmpeg-4-libpostproc-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswscale-devel-4.4.6-150600.13.33.1

ffmpeg-4-private-devel-4.4.6-150600.13.33.1

libavcodec58_134-4.4.6-150600.13.33.1

libavdevice58_13-4.4.6-150600.13.33.1

libavfilter7_110-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavresample4_0-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libpostproc55_9-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

SUSE Linux Enterprise Workstation Extension 15 SP6

libavcodec58_134-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

SUSE Linux Enterprise Workstation Extension 15 SP7

libavcodec58_134-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

openSUSE Leap 15.6

ffmpeg-4-4.4.6-150600.13.33.1

ffmpeg-4-libavcodec-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavdevice-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavfilter-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavformat-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libavutil-devel-4.4.6-150600.13.33.1

ffmpeg-4-libpostproc-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswresample-devel-4.4.6-150600.13.33.1

ffmpeg-4-libswscale-devel-4.4.6-150600.13.33.1

ffmpeg-4-private-devel-4.4.6-150600.13.33.1

libavcodec58_134-4.4.6-150600.13.33.1

libavcodec58_134-32bit-4.4.6-150600.13.33.1

libavdevice58_13-4.4.6-150600.13.33.1

libavdevice58_13-32bit-4.4.6-150600.13.33.1

libavfilter7_110-4.4.6-150600.13.33.1

libavfilter7_110-32bit-4.4.6-150600.13.33.1

libavformat58_76-4.4.6-150600.13.33.1

libavformat58_76-32bit-4.4.6-150600.13.33.1

libavresample4_0-4.4.6-150600.13.33.1

libavresample4_0-32bit-4.4.6-150600.13.33.1

libavutil56_70-4.4.6-150600.13.33.1

libavutil56_70-32bit-4.4.6-150600.13.33.1

libpostproc55_9-4.4.6-150600.13.33.1

libpostproc55_9-32bit-4.4.6-150600.13.33.1

libswresample3_9-4.4.6-150600.13.33.1

libswresample3_9-32bit-4.4.6-150600.13.33.1

libswscale5_9-4.4.6-150600.13.33.1

libswscale5_9-32bit-4.4.6-150600.13.33.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20253715-1/
Link for SUSE-SU-2025:3715-1
https://lists.suse.com/pipermail/sle-security-updates/2025-October/022963.html
E-Mail link for SUSE-SU-2025:3715-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1226308
SUSE Bug 1226308
https://bugzilla.suse.com/1251137
SUSE Bug 1251137
https://www.suse.com/security/cve/CVE-2025-59728/
SUSE CVE CVE-2025-59728 page
https://www.suse.com/security/cve/CVE-2025-7700/
SUSE CVE CVE-2025-7700 page

Описание

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below [0], it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is not an empty string, it is assigned to root_url at [1].If the last (non-NUL) byte in this buffer is not '/' then we append '/' in-place at [2]. This will write two bytes into the buffer, starting at the last valid byte in the buffer, writing the NUL byte beyond the end of the allocated buffer. We recommend upgrading to version 8.0 or beyond.

Затронутые продукты

Container containers/open-webui:0:libavcodec58_134-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavdevice58_13-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavfilter7_110-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavformat58_76-4.4.6-150600.13.33.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-59728.html
CVE-2025-59728
https://bugzilla.suse.com/1251137
SUSE Bug 1251137

Описание

A flaw was found in FFmpeg's ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.

Затронутые продукты

Container containers/open-webui:0:libavcodec58_134-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavdevice58_13-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavfilter7_110-4.4.6-150600.13.33.1

Container containers/open-webui:0:libavformat58_76-4.4.6-150600.13.33.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-7700.html
CVE-2025-7700
https://bugzilla.suse.com/1246790
SUSE Bug 1246790

SUSE-SU-2025:3715-1

Описание

Список пакетов

Container containers/open-webui:0

Container containers/vllm-openai:0

Container suse/kiosk/firefox-esr:latest

Container suse/kiosk/xorg-client:latest

Image ai_15_6

SUSE Linux Enterprise Module for Package Hub 15 SP6

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Workstation Extension 15 SP6

SUSE Linux Enterprise Workstation Extension 15 SP7

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2025-59728

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-7700

Описание

Затронутые продукты

Ссылки