Security update for ffmpeg SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:3521-1 Final 1 1 2021-10-26T13:39:27Z current 2021-10-26T13:39:27Z 2021-10-26T13:39:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2021-3566: Fixed information leak (bsc#1189166). - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734) - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733) - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735) - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756) - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852) - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719) - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718) - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722) - CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723) - CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726) - CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2021-3521 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ E-Mail link for openSUSE-SU-2021:3521-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1186756 SUSE Bug 1186756 https://bugzilla.suse.com/1187852 SUSE Bug 1187852 https://bugzilla.suse.com/1189166 SUSE Bug 1189166 https://bugzilla.suse.com/1190718 SUSE Bug 1190718 https://bugzilla.suse.com/1190719 SUSE Bug 1190719 https://bugzilla.suse.com/1190722 SUSE Bug 1190722 https://bugzilla.suse.com/1190723 SUSE Bug 1190723 https://bugzilla.suse.com/1190726 SUSE Bug 1190726 https://bugzilla.suse.com/1190729 SUSE Bug 1190729 https://bugzilla.suse.com/1190733 SUSE Bug 1190733 https://bugzilla.suse.com/1190734 SUSE Bug 1190734 https://bugzilla.suse.com/1190735 SUSE Bug 1190735 https://www.suse.com/security/cve/CVE-2020-20891/ SUSE CVE CVE-2020-20891 page https://www.suse.com/security/cve/CVE-2020-20892/ SUSE CVE CVE-2020-20892 page https://www.suse.com/security/cve/CVE-2020-20895/ SUSE CVE CVE-2020-20895 page https://www.suse.com/security/cve/CVE-2020-20896/ SUSE CVE CVE-2020-20896 page https://www.suse.com/security/cve/CVE-2020-20899/ SUSE CVE CVE-2020-20899 page https://www.suse.com/security/cve/CVE-2020-20902/ SUSE CVE CVE-2020-20902 page https://www.suse.com/security/cve/CVE-2020-22037/ SUSE CVE CVE-2020-22037 page https://www.suse.com/security/cve/CVE-2020-35965/ SUSE CVE CVE-2020-35965 page https://www.suse.com/security/cve/CVE-2021-3566/ SUSE CVE CVE-2021-3566 page https://www.suse.com/security/cve/CVE-2021-38092/ SUSE CVE CVE-2021-38092 page https://www.suse.com/security/cve/CVE-2021-38093/ SUSE CVE CVE-2021-38093 page https://www.suse.com/security/cve/CVE-2021-38094/ SUSE CVE CVE-2021-38094 page openSUSE Leap 15.3 ffmpeg-3.4.2-11.17.1 ffmpeg-private-devel-3.4.2-11.17.1 libavcodec-devel-3.4.2-11.17.1 libavcodec57-3.4.2-11.17.1 libavcodec57-32bit-3.4.2-11.17.1 libavdevice-devel-3.4.2-11.17.1 libavdevice57-3.4.2-11.17.1 libavdevice57-32bit-3.4.2-11.17.1 libavfilter-devel-3.4.2-11.17.1 libavfilter6-3.4.2-11.17.1 libavfilter6-32bit-3.4.2-11.17.1 libavformat-devel-3.4.2-11.17.1 libavformat57-3.4.2-11.17.1 libavformat57-32bit-3.4.2-11.17.1 libavresample-devel-3.4.2-11.17.1 libavresample3-3.4.2-11.17.1 libavresample3-32bit-3.4.2-11.17.1 libavutil-devel-3.4.2-11.17.1 libavutil55-3.4.2-11.17.1 libavutil55-32bit-3.4.2-11.17.1 libpostproc-devel-3.4.2-11.17.1 libpostproc54-3.4.2-11.17.1 libpostproc54-32bit-3.4.2-11.17.1 libswresample-devel-3.4.2-11.17.1 libswresample2-3.4.2-11.17.1 libswresample2-32bit-3.4.2-11.17.1 libswscale-devel-3.4.2-11.17.1 libswscale4-3.4.2-11.17.1 libswscale4-32bit-3.4.2-11.17.1 ffmpeg-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 ffmpeg-private-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavcodec-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavcodec57-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavcodec57-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavdevice-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavdevice57-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavdevice57-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavfilter-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavfilter6-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavfilter6-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavformat-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavformat57-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavformat57-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavresample-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavresample3-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavresample3-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavutil-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavutil55-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libavutil55-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libpostproc-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libpostproc54-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libpostproc54-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswresample-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswresample2-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswresample2-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswscale-devel-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswscale4-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 libswscale4-32bit-3.4.2-11.17.1 as a component of openSUSE Leap 15.3 Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. CVE-2020-20891 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20891.html CVE-2020-20891 https://bugzilla.suse.com/1190718 SUSE Bug 1190718 An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero. CVE-2020-20892 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20892.html CVE-2020-20892 https://bugzilla.suse.com/1190719 SUSE Bug 1190719 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22028. Reason: This candidate is a duplicate of CVE-2020-22028. Notes: All CVE users should reference CVE-2020-22028 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2020-20895 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20895.html CVE-2020-20895 https://bugzilla.suse.com/1190722 SUSE Bug 1190722 An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference. CVE-2020-20896 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20896.html CVE-2020-20896 https://bugzilla.suse.com/1190723 SUSE Bug 1190723 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22036. Reason: This candidate is a duplicate of CVE-2020-22036. Notes: All CVE users should reference CVE-2020-22036 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2020-20899 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20899.html CVE-2020-20899 https://bugzilla.suse.com/1190726 SUSE Bug 1190726 A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information. CVE-2020-20902 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-20902.html CVE-2020-20902 https://bugzilla.suse.com/1190729 SUSE Bug 1190729 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. CVE-2020-22037 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-22037.html CVE-2020-22037 https://bugzilla.suse.com/1186756 SUSE Bug 1186756 decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. CVE-2020-35965 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2020-35965.html CVE-2020-35965 https://bugzilla.suse.com/1187852 SUSE Bug 1187852 Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg). CVE-2021-3566 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2021-3566.html CVE-2021-3566 https://bugzilla.suse.com/1189166 SUSE Bug 1189166 Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. CVE-2021-38092 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2021-38092.html CVE-2021-38092 https://bugzilla.suse.com/1190733 SUSE Bug 1190733 Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. CVE-2021-38093 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2021-38093.html CVE-2021-38093 https://bugzilla.suse.com/1190734 SUSE Bug 1190734 Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. CVE-2021-38094 openSUSE Leap 15.3:ffmpeg-3.4.2-11.17.1 openSUSE Leap 15.3:ffmpeg-private-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-3.4.2-11.17.1 openSUSE Leap 15.3:libavcodec57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-3.4.2-11.17.1 openSUSE Leap 15.3:libavdevice57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-3.4.2-11.17.1 openSUSE Leap 15.3:libavfilter6-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-3.4.2-11.17.1 openSUSE Leap 15.3:libavformat57-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-3.4.2-11.17.1 openSUSE Leap 15.3:libavresample3-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-3.4.2-11.17.1 openSUSE Leap 15.3:libavutil55-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-3.4.2-11.17.1 openSUSE Leap 15.3:libpostproc54-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-3.4.2-11.17.1 openSUSE Leap 15.3:libswresample2-32bit-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale-devel-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-3.4.2-11.17.1 openSUSE Leap 15.3:libswscale4-32bit-3.4.2-11.17.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/ https://www.suse.com/security/cve/CVE-2021-38094.html CVE-2021-38094 https://bugzilla.suse.com/1190735 SUSE Bug 1190735