SUSE-SU-2024:3358-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation CVE-2023-48368, bsc1226897 libmfx: improper buffer restrictions CVE-2023-45221, bsc1226898 libmfx: out-of-bounds read CVE-2023-22656, bsc1226899 libmfx:...

OESA-2024-2155 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:3301-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3301-1 advisory. - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026 Tenable has extracted the...

SUSE-SU-2024:3301-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026...

OPENSUSE-SU-2024:14343-1 ffmpeg-4-4.4.4-14.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.4-14.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the `load_input_picture` function in the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the loadinputpicture function in the FFmpeg multimedia library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

OPENSUSE-SU-2024:14344-1 ffmpeg-6-6.1.1-9.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.1-9.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg-5-5.1.4-13.1 on GA media (moderate)

ffmpeg-5-5.1.4-13.1 on GA media Announcement ID: openSUSE-SU-2024:14339-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-6-6.1.1-9.1 on GA media (moderate)

ffmpeg-6-6.1.1-9.1 on GA media Announcement ID: openSUSE-SU-2024:14344-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-4-4.4.4-14.1 on GA media (moderate)

ffmpeg-4-4.4.4-14.1 on GA media Announcement ID: openSUSE-SU-2024:14343-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2024:14339-1 ffmpeg-5-5.1.4-13.1 on GA media

These are all security issues fixed in the ffmpeg-5-5.1.4-13.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the libavfilter/vfcodecview.c component of the FFmpeg multimedia library involves an operation that occurs outside the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libavfilter/vfcodecview.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

The vulnerability of the av_malloc function in the libavutil/mem.c component of the FFmpeg multimedia library, which involves copying buffers without checking the input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the avmalloc function in the libavutil/mem.c component of the FFmpeg multimedia library is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

Mageia: Security Advisory (MGASA-2024-0283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated ffmpeg packages fix security vulnerabilities

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnmdecodeframe in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

MGASA-2024-0283 Updated ffmpeg packages fix security vulnerabilities

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnmdecodeframe in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

openSUSE Security Advisory (SUSE-SU-2024:3114-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2024:3114-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3114-1 advisory. - CVE-2020-22027: Fixed heap-based Buffer Overflow vulnerability exits in deflate16 at...

SUSE-SU-2024:3114-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2020-22027: Fixed heap-based Buffer Overflow vulnerability exits in deflate16 at libavfilter/vfneighbor.c bsc1186607 - CVE-2021-38291: Fixed an assertion failure at src/libavutil/mathematics.c bsc1189428 - CVE-2023-51798: Fixed floating poi...

Ubuntu: Security Advisory (USN-6983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...