Lucene search

K
suseSuseOPENSUSE-SU-2021:2322-1
HistoryJul 14, 2021 - 12:00 a.m.

Security update for ffmpeg (important)

2021-07-1400:00:00
lists.opensuse.org
12

EPSS

0.03

Percentile

90.9%

An update that fixes 23 vulnerabilities is now available.

Description:

This update for ffmpeg fixes the following issues:

  • CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an
    m3u8 file (bsc#1172640).
  • CVE-2020-21041: Fixed buffer overflow vulnerability via
    apng_do_inverse_blend in libavcodec/pngenc.c (bsc#1186406).
  • CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in
    libavcodec/utils.c (bsc# 1154065).
  • CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at
    libavfilter/af_tremolo.c (bsc#1186583).
  • CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges
    function in libavfilter/vf_yadif.c (bsc#1186586).
  • CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map()
    in libavfilter/vf_fieldmatch.c (bsc#1186587).
  • CVE-2020-22015: Fixed buffer overflow vulnerability in
    mov_write_video_tag() due to the out of bounds in libavformat/movenc.c
    (bsc#1186596).
  • CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at
    libavcodec/get_bits.h when writing .mov files (bsc#1186598).
  • CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in
    ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
  • CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in
    filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
  • CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in
    filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
  • CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in
    gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
  • CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at
    libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613).
  • CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at
    libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
  • CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at
    libavfilter/vf_floodfill.c (bsc#1186616).
  • CVE-2020-20451: Fixed denial of service issue due to resource management
    errors via fftools/cmdutils.c (bsc#1186658).
  • CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c
    (bsc#1186660).
  • CVE-2020-22038: Fixed denial of service vulnerability due to a memory
    leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c
    (bsc#1186757).
  • CVE-2020-22039: Fixed denial of service vulnerability due to a memory
    leak in the inavi_add_ientry function (bsc#1186758).
  • CVE-2020-22043: Fixed denial of service vulnerability due to a memory
    leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762).
  • CVE-2020-22044: Fixed denial of service vulnerability due to a memory
    leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c
    (bsc#1186763).
  • CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow
    Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and
    in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615,
    bsc#1186597).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2021-2322=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (x86_64):- openSUSE Leap 15.3 (x86_64):.x86_64.rpm