Security update for ffmpeg SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:2322-1 Final 1 1 2021-07-14T15:03:30Z current 2021-07-14T15:03:30Z 2021-07-14T15:03:30Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640). - CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c (bsc#1186406). - CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065). - CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583). - CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586). - CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587). - CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596). - CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598). - CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600). - CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603). - CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604) - CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605). - CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613). - CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614). - CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616). - CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658). - CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660). - CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757). - CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758). - CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762). - CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763). - CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2021-2322 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ E-Mail link for openSUSE-SU-2021:2322-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1172640 SUSE Bug 1172640 https://bugzilla.suse.com/1186406 SUSE Bug 1186406 https://bugzilla.suse.com/1186583 SUSE Bug 1186583 https://bugzilla.suse.com/1186586 SUSE Bug 1186586 https://bugzilla.suse.com/1186587 SUSE Bug 1186587 https://bugzilla.suse.com/1186596 SUSE Bug 1186596 https://bugzilla.suse.com/1186597 SUSE Bug 1186597 https://bugzilla.suse.com/1186598 SUSE Bug 1186598 https://bugzilla.suse.com/1186600 SUSE Bug 1186600 https://bugzilla.suse.com/1186603 SUSE Bug 1186603 https://bugzilla.suse.com/1186604 SUSE Bug 1186604 https://bugzilla.suse.com/1186605 SUSE Bug 1186605 https://bugzilla.suse.com/1186613 SUSE Bug 1186613 https://bugzilla.suse.com/1186614 SUSE Bug 1186614 https://bugzilla.suse.com/1186615 SUSE Bug 1186615 https://bugzilla.suse.com/1186616 SUSE Bug 1186616 https://bugzilla.suse.com/1186658 SUSE Bug 1186658 https://bugzilla.suse.com/1186660 SUSE Bug 1186660 https://bugzilla.suse.com/1186757 SUSE Bug 1186757 https://bugzilla.suse.com/1186758 SUSE Bug 1186758 https://bugzilla.suse.com/1186762 SUSE Bug 1186762 https://bugzilla.suse.com/1186763 SUSE Bug 1186763 https://www.suse.com/security/cve/CVE-2019-17539/ SUSE CVE CVE-2019-17539 page https://www.suse.com/security/cve/CVE-2020-13904/ SUSE CVE CVE-2020-13904 page https://www.suse.com/security/cve/CVE-2020-20448/ SUSE CVE CVE-2020-20448 page https://www.suse.com/security/cve/CVE-2020-20451/ SUSE CVE CVE-2020-20451 page https://www.suse.com/security/cve/CVE-2020-21041/ SUSE CVE CVE-2020-21041 page https://www.suse.com/security/cve/CVE-2020-22015/ SUSE CVE CVE-2020-22015 page https://www.suse.com/security/cve/CVE-2020-22016/ SUSE CVE CVE-2020-22016 page https://www.suse.com/security/cve/CVE-2020-22017/ SUSE CVE CVE-2020-22017 page https://www.suse.com/security/cve/CVE-2020-22019/ SUSE CVE CVE-2020-22019 page https://www.suse.com/security/cve/CVE-2020-22020/ SUSE CVE CVE-2020-22020 page https://www.suse.com/security/cve/CVE-2020-22021/ SUSE CVE CVE-2020-22021 page https://www.suse.com/security/cve/CVE-2020-22022/ SUSE CVE CVE-2020-22022 page https://www.suse.com/security/cve/CVE-2020-22023/ SUSE CVE CVE-2020-22023 page https://www.suse.com/security/cve/CVE-2020-22025/ SUSE CVE CVE-2020-22025 page https://www.suse.com/security/cve/CVE-2020-22026/ SUSE CVE CVE-2020-22026 page https://www.suse.com/security/cve/CVE-2020-22031/ SUSE CVE CVE-2020-22031 page https://www.suse.com/security/cve/CVE-2020-22032/ SUSE CVE CVE-2020-22032 page https://www.suse.com/security/cve/CVE-2020-22033/ SUSE CVE CVE-2020-22033 page https://www.suse.com/security/cve/CVE-2020-22034/ SUSE CVE CVE-2020-22034 page https://www.suse.com/security/cve/CVE-2020-22038/ SUSE CVE CVE-2020-22038 page https://www.suse.com/security/cve/CVE-2020-22039/ SUSE CVE CVE-2020-22039 page https://www.suse.com/security/cve/CVE-2020-22043/ SUSE CVE CVE-2020-22043 page https://www.suse.com/security/cve/CVE-2020-22044/ SUSE CVE CVE-2020-22044 page openSUSE Leap 15.3 ffmpeg-3.4.2-11.3.1 ffmpeg-private-devel-3.4.2-11.3.1 libavcodec-devel-3.4.2-11.3.1 libavcodec57-3.4.2-11.3.1 libavcodec57-32bit-3.4.2-11.3.1 libavdevice-devel-3.4.2-11.3.1 libavdevice57-3.4.2-11.3.1 libavdevice57-32bit-3.4.2-11.3.1 libavfilter-devel-3.4.2-11.3.1 libavfilter6-3.4.2-11.3.1 libavfilter6-32bit-3.4.2-11.3.1 libavformat-devel-3.4.2-11.3.1 libavformat57-3.4.2-11.3.1 libavformat57-32bit-3.4.2-11.3.1 libavresample-devel-3.4.2-11.3.1 libavresample3-3.4.2-11.3.1 libavresample3-32bit-3.4.2-11.3.1 libavutil-devel-3.4.2-11.3.1 libavutil55-3.4.2-11.3.1 libavutil55-32bit-3.4.2-11.3.1 libpostproc-devel-3.4.2-11.3.1 libpostproc54-3.4.2-11.3.1 libpostproc54-32bit-3.4.2-11.3.1 libswresample-devel-3.4.2-11.3.1 libswresample2-3.4.2-11.3.1 libswresample2-32bit-3.4.2-11.3.1 libswscale-devel-3.4.2-11.3.1 libswscale4-3.4.2-11.3.1 libswscale4-32bit-3.4.2-11.3.1 ffmpeg-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 ffmpeg-private-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavcodec-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavcodec57-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavcodec57-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavdevice-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavdevice57-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavdevice57-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavfilter-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavfilter6-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavfilter6-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavformat-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavformat57-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavformat57-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavresample-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavresample3-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavresample3-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavutil-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavutil55-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libavutil55-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libpostproc-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libpostproc54-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libpostproc54-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswresample-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswresample2-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswresample2-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswscale-devel-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswscale4-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 libswscale4-32bit-3.4.2-11.3.1 as a component of openSUSE Leap 15.3 In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer. CVE-2019-17539 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 low 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2019-17539.html CVE-2019-17539 https://bugzilla.suse.com/1154065 SUSE Bug 1154065 FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c. CVE-2020-13904 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-13904.html CVE-2020-13904 https://bugzilla.suse.com/1172640 SUSE Bug 1172640 FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. CVE-2020-20448 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4 AV:N/AC:L/Au:S/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-20448.html CVE-2020-20448 https://bugzilla.suse.com/1186660 SUSE Bug 1186660 Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. CVE-2020-20451 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-20451.html CVE-2020-20451 https://bugzilla.suse.com/1186658 SUSE Bug 1186658 Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service CVE-2020-21041 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-21041.html CVE-2020-21041 https://bugzilla.suse.com/1186406 SUSE Bug 1186406 Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code. CVE-2020-22015 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22015.html CVE-2020-22015 https://bugzilla.suse.com/1186596 SUSE Bug 1186596 A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences. CVE-2020-22016 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 low 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22016.html CVE-2020-22016 https://bugzilla.suse.com/1186598 SUSE Bug 1186598 A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences. CVE-2020-22017 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22017.html CVE-2020-22017 https://bugzilla.suse.com/1186600 SUSE Bug 1186600 Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. CVE-2020-22019 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22019.html CVE-2020-22019 https://bugzilla.suse.com/1186597 SUSE Bug 1186597 Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. CVE-2020-22020 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22020.html CVE-2020-22020 https://bugzilla.suse.com/1186587 SUSE Bug 1186587 Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. CVE-2020-22021 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22021.html CVE-2020-22021 https://bugzilla.suse.com/1186586 SUSE Bug 1186586 A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences. CVE-2020-22022 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22022.html CVE-2020-22022 https://bugzilla.suse.com/1186603 SUSE Bug 1186603 A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences. CVE-2020-22023 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22023.html CVE-2020-22023 https://bugzilla.suse.com/1186604 SUSE Bug 1186604 A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences. CVE-2020-22025 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22025.html CVE-2020-22025 https://bugzilla.suse.com/1186605 SUSE Bug 1186605 Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. CVE-2020-22026 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22026.html CVE-2020-22026 https://bugzilla.suse.com/1186583 SUSE Bug 1186583 A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences. CVE-2020-22031 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22031.html CVE-2020-22031 https://bugzilla.suse.com/1186613 SUSE Bug 1186613 A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences. CVE-2020-22032 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22032.html CVE-2020-22032 https://bugzilla.suse.com/1186614 SUSE Bug 1186614 A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service. CVE-2020-22033 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22033.html CVE-2020-22033 https://bugzilla.suse.com/1186615 SUSE Bug 1186615 A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences. CVE-2020-22034 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22034.html CVE-2020-22034 https://bugzilla.suse.com/1186616 SUSE Bug 1186616 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. CVE-2020-22038 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22038.html CVE-2020-22038 https://bugzilla.suse.com/1186757 SUSE Bug 1186757 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. CVE-2020-22039 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22039.html CVE-2020-22039 https://bugzilla.suse.com/1186758 SUSE Bug 1186758 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. CVE-2020-22043 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22043.html CVE-2020-22043 https://bugzilla.suse.com/1186762 SUSE Bug 1186762 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. CVE-2020-22044 openSUSE Leap 15.3:ffmpeg-3.4.2-11.3.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.3.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.3.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.3.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.3.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.3.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.3.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.3.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.3.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.3.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MM55YS6XXAKFK3J35CDODMYMAZO6JX3S/ https://www.suse.com/security/cve/CVE-2020-22044.html CVE-2020-22044 https://bugzilla.suse.com/1186763 SUSE Bug 1186763