Oval Definition:oval:org.opensuse.security:def:66287
Revision Date:2020-12-01Version:1
Title:Security update for ffmpeg (Important)
Description:

This update for ffmpeg fixes the following issues:

Security issues fixed: - CVE-2019-17542: Fixed a heap-buffer overflow in vqa_decode_chunk due to an out-of-array access (bsc#1154064). - CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check (bsc#1137526). - CVE-2019-9718: Fixed a denial of service in the subtitle decode (bsc#1129715). - CVE-2018-13301: Fixed a denial of service while converting a crafted AVI file to MPEG4 (bsc#1100352).
Family:unixClass:patch
Status:Reference(s):1100352
1129715
1137526
1154064
CVE-2015-0247
CVE-2015-1572
CVE-2018-13301
CVE-2019-12730
CVE-2019-17542
CVE-2019-5094
CVE-2019-5188
CVE-2019-9718
SUSE-SU-2019:3184-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Workstation Extension 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • e2fsprogs-1.43.8-4.20 is installed
  • OR e2fsprogs-devel-1.43.8-4.20 is installed
  • OR libcom_err-devel-1.43.8-4.20 is installed
  • OR libcom_err-devel-static-1.43.8-4.20 is installed
  • OR libcom_err2-1.43.8-4.20 is installed
  • OR libcom_err2-32bit-1.43.8-4.20 is installed
  • OR libext2fs-devel-1.43.8-4.20 is installed
  • OR libext2fs-devel-static-1.43.8-4.20 is installed
  • OR libext2fs2-1.43.8-4.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • ffmpeg-3.4.2-4.27 is installed
  • OR libavcodec-devel-3.4.2-4.27 is installed
  • OR libavformat-devel-3.4.2-4.27 is installed
  • OR libavformat57-3.4.2-4.27 is installed
  • OR libavresample-devel-3.4.2-4.27 is installed
  • OR libavresample3-3.4.2-4.27 is installed
  • BACK