Описание
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issue:
- CVE-2026-30997: out-of-bounds read in the
read_global_param()function allows for a DoS via crafted input (bsc#1262047).
Список пакетов
openSUSE Leap 16.0
ffmpeg-7-7.1.4-160000.2.1
ffmpeg-7-libavcodec-devel-7.1.4-160000.2.1
ffmpeg-7-libavdevice-devel-7.1.4-160000.2.1
ffmpeg-7-libavfilter-devel-7.1.4-160000.2.1
ffmpeg-7-libavformat-devel-7.1.4-160000.2.1
ffmpeg-7-libavutil-devel-7.1.4-160000.2.1
ffmpeg-7-libpostproc-devel-7.1.4-160000.2.1
ffmpeg-7-libswresample-devel-7.1.4-160000.2.1
ffmpeg-7-libswscale-devel-7.1.4-160000.2.1
libavcodec61-7.1.4-160000.2.1
libavdevice61-7.1.4-160000.2.1
libavfilter10-7.1.4-160000.2.1
libavformat61-7.1.4-160000.2.1
libavutil59-7.1.4-160000.2.1
libpostproc58-7.1.4-160000.2.1
libswresample5-7.1.4-160000.2.1
libswscale8-7.1.4-160000.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1262047
- SUSE CVE CVE-2026-30997 page
Описание
An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Затронутые продукты
openSUSE Leap 16.0:ffmpeg-7-7.1.4-160000.2.1
openSUSE Leap 16.0:ffmpeg-7-libavcodec-devel-7.1.4-160000.2.1
openSUSE Leap 16.0:ffmpeg-7-libavdevice-devel-7.1.4-160000.2.1
openSUSE Leap 16.0:ffmpeg-7-libavfilter-devel-7.1.4-160000.2.1
Ссылки
- CVE-2026-30997
- SUSE Bug 1262047