Oval Definition:	oval:org.opensuse.security:def:5771
Revision Date: 2021-07-14 Version: 1 Title: Security update for ffmpeg (Important) Description: This update for ffmpeg fixes the following issues: - CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640). - CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c (bsc#1186406). - CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065). - CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583). - CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586). - CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587). - CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596). - CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598). - CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600). - CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603). - CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604) - CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605). - CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613). - CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614). - CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616). - CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658). - CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660). - CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757). - CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758). - CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762). - CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763). - CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597). Family: unix Class: patch Status: Reference(s): 1172640 1186406 1186583 1186586 1186587 1186596 1186597 1186598 1186600 1186603 1186604 1186605 1186613 1186614 1186615 1186616 1186658 1186660 1186757 1186758 1186762 1186763 CVE-2004-2771 CVE-2009-0163 CVE-2009-2820 CVE-2009-3553 CVE-2009-4012 CVE-2009-5029 CVE-2010-0393 CVE-2010-0540 CVE-2010-0542 CVE-2010-1748 CVE-2010-2800 CVE-2010-2801 CVE-2010-2891 CVE-2010-2935 CVE-2010-2936 CVE-2010-2941 CVE-2011-2199 CVE-2012-3406 CVE-2012-4412 CVE-2012-4504 CVE-2012-5519 CVE-2012-6094 CVE-2013-0242 CVE-2013-1914 CVE-2013-2001 CVE-2013-2207 CVE-2013-4237 CVE-2013-4332 CVE-2013-4458 CVE-2013-6418 CVE-2013-7423 CVE-2013-7447 CVE-2014-0247 CVE-2014-0250 CVE-2014-0475 CVE-2014-0791 CVE-2014-2856 CVE-2014-3524 CVE-2014-3537 CVE-2014-3575 CVE-2014-3693 CVE-2014-4043 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 CVE-2014-5119 CVE-2014-6040 CVE-2014-7817 CVE-2014-7844 CVE-2014-8121 CVE-2014-8146 CVE-2014-8147 CVE-2014-9093 CVE-2014-9402 CVE-2014-9556 CVE-2014-9732 CVE-2014-9761 CVE-2015-0848 CVE-2015-1472 CVE-2015-1473 CVE-2015-1781 CVE-2015-4467 CVE-2015-4468 CVE-2015-4469 CVE-2015-4470 CVE-2015-4471 CVE-2015-4472 CVE-2015-4551 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2015-7547 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779 CVE-2016-0794 CVE-2016-0795 CVE-2016-1234 CVE-2016-3075 CVE-2016-3706 CVE-2016-4324 CVE-2016-4429 CVE-2016-6855 CVE-2016-9811 CVE-2017-1000366 CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 CVE-2019-17539 CVE-2020-13904 CVE-2020-20448 CVE-2020-20451 CVE-2020-21041 CVE-2020-22015 CVE-2020-22016 CVE-2020-22017 CVE-2020-22019 CVE-2020-22020 CVE-2020-22021 CVE-2020-22022 CVE-2020-22023 CVE-2020-22025 CVE-2020-22026 CVE-2020-22031 CVE-2020-22032 CVE-2020-22033 CVE-2020-22034 CVE-2020-22038 CVE-2020-22039 CVE-2020-22043 CVE-2020-22044 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information python-glanceclient-0.15.0-3.1 is installed OR python-keystoneclient-1.0.0-19.1 is installed OR python-keystoneclient-doc-1.0.0-19.1 is installed OR python-keystonemiddleware-1.2.0-4.1 is installed OR python-novaclient-2.20.0-6.1 is installed OR python-novaclient-doc-2.20.0-6.1 is installed OR python-swiftclient-2.3.1-3.1 is installed OR python-swiftclient-doc-2.3.1-3.1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information krb5-mini-1.12.1-16 is installed OR krb5-mini-devel-1.12.1-16 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cups-1.7.5-2 is installed OR cups-client-1.7.5-2 is installed OR cups-libs-1.7.5-2 is installed OR cups-libs-32bit-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libsmi-0.4.8-18 is installed OR libsmi2-0.4.8-18 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information eog-3.20.4-7 is installed OR eog-lang-3.20.4-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information apache2-2.4.10-14.17.1 is installed OR apache2-doc-2.4.10-14.17.1 is installed OR apache2-example-pages-2.4.10-14.17.1 is installed OR apache2-prefork-2.4.10-14.17.1 is installed OR apache2-utils-2.4.10-14.17.1 is installed OR apache2-worker-2.4.10-14.17.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information evince-3.10.3-2.3.1 is installed OR evince-lang-3.10.3-2.3.1 is installed OR libevdocument3-4-3.10.3-2.3.1 is installed OR libevview3-3-3.10.3-2.3.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information conntrack-tools-1.4.2-5 is installed OR libnetfilter_cthelper-1.0.0-7 is installed OR libnetfilter_cthelper0-1.0.0-7 is installed OR libnetfilter_cttimeout-1.0.0-9 is installed OR libnetfilter_cttimeout1-1.0.0-9 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information libpacemaker3-1.1.13-20 is installed OR pacemaker-1.1.13-20 is installed OR pacemaker-cli-1.1.13-20 is installed OR pacemaker-cts-1.1.13-20 is installed OR pacemaker-remote-1.1.13-20 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information libpcreposix0-8.39-5 is installed OR pcre-8.39-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND haproxy-1.6.11-10 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND Package Information corosync-2.3.6-9.13 is installed OR libcorosync4-2.3.6-9.13 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_43-52_6-default-1-2 is installed OR kgraft-patch-3_12_43-52_6-xen-1-2 is installed OR kgraft-patch-SLE12_Update_5-1-2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.69-60.30.1 is installed OR kernel-compute-base-3.12.69-60.30.1 is installed OR kernel-compute-devel-3.12.69-60.30.1 is installed OR kernel-compute_debug-3.12.69-60.30.1 is installed OR kernel-compute_debug-devel-3.12.69-60.30.1 is installed OR kernel-devel-rt-3.12.69-60.30.1 is installed OR kernel-rt-3.12.69-60.30.1 is installed OR kernel-rt-base-3.12.69-60.30.1 is installed OR kernel-rt-devel-3.12.69-60.30.1 is installed OR kernel-rt_debug-3.12.69-60.30.1 is installed OR kernel-rt_debug-devel-3.12.69-60.30.1 is installed OR kernel-source-rt-3.12.69-60.30.1 is installed OR kernel-syms-rt-3.12.69-60.30.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.95-21.1 is installed OR cluster-network-kmp-rt-4.4.95-21.1 is installed OR dlm-kmp-rt-4.4.95-21.1 is installed OR gfs2-kmp-rt-4.4.95-21.1 is installed OR kernel-devel-rt-4.4.95-21.1 is installed OR kernel-rt-4.4.95-21.1 is installed OR kernel-rt-base-4.4.95-21.1 is installed OR kernel-rt-devel-4.4.95-21.1 is installed OR kernel-rt_debug-4.4.95-21.1 is installed OR kernel-rt_debug-devel-4.4.95-21.1 is installed OR kernel-source-rt-4.4.95-21.1 is installed OR kernel-syms-rt-4.4.95-21.1 is installed OR ocfs2-kmp-rt-4.4.95-21.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND libgdiplus0-2.0-11.20.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information PolicyKit-0.9-14.39.1 is installed OR PolicyKit-32bit-0.9-14.39.1 is installed OR PolicyKit-doc-0.9-14.39.2 is installed OR PolicyKit-x86-0.9-14.39.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-24.5.0esr-0.3.1 is installed OR MozillaFirefox-branding-SLED-24-0.4.10.14 is installed OR MozillaFirefox-translations-24.5.0esr-0.3.1 is installed OR libfreebl3-3.16-0.3.1 is installed OR libfreebl3-32bit-3.16-0.3.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nspr-devel-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.3.1 is installed OR mozilla-nss-32bit-3.16-0.3.1 is installed OR mozilla-nss-devel-3.16-0.3.1 is installed OR mozilla-nss-tools-3.16-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information cvs-1.12.12-144.23.5.1 is installed OR cvs-doc-1.12.12-144.23.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ant-1.7.1-20.11.1 is installed OR ant-trax-1.7.1-16.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND clamav-0.98.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libldap-2_4-2-2.4.41-18.40 is installed OR libldap-2_4-2-32bit-2.4.41-18.40 is installed OR openldap2-2.4.41-18.40 is installed OR openldap2-back-meta-2.4.41-18.40 is installed OR openldap2-client-2.4.41-18.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_63-default-4-2.1 is installed OR kgraft-patch-3_12_60-52_63-xen-4-2.1 is installed OR kgraft-patch-SLE12_Update_18-4-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information ntp-4.2.8p12-64.8 is installed OR ntp-doc-4.2.8p12-64.8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information rubygem-activesupport-3_2-3.2.12-0.5.8 is installed OR rubygem-rack-1_4-1.4.5-0.5.8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information apache2-2.2.12-59.1 is installed OR apache2-devel-2.2.12-59.1 is installed OR apache2-doc-2.2.12-59.1 is installed OR apache2-example-pages-2.2.12-59.1 is installed OR apache2-prefork-2.2.12-59.1 is installed OR apache2-utils-2.2.12-59.1 is installed OR apache2-worker-2.2.12-59.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND aaa_base-malloccheck-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information dbus-1-devel-1.8.16-14 is installed OR dbus-1-devel-doc-1.8.16-14 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND libsaml-devel-2.5.5-3.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gimp-2.8.10-1 is installed OR gimp-lang-2.8.10-1 is installed OR gimp-plugins-python-2.8.10-1 is installed OR libgimp-2_0-0-2.8.10-1 is installed OR libgimpui-2_0-0-2.8.10-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information empathy-3.12.12-7 is installed OR empathy-lang-3.12.12-7 is installed OR telepathy-mission-control-plugin-goa-3.12.12-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bash-lang-4.3-83.15 is installed
BACK