Security update for ffmpeg-4 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:1592-1 Final 1 1 2024-05-10T07:20:27Z current 2024-05-10T07:20:27Z 2024-05-10T07:20:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ffmpeg-4 This update for ffmpeg-4 fixes the following issues: - CVE-2023-50010: Fixed an arbitrary code execution via the set_encoder_id() (bsc#1223256). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2024-1592,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1592,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1592,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1592,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1592,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1592,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1592,SUSE-SLE-Product-WE-15-SP5-2024-1592,openSUSE-SLE-15.5-2024-1592 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20241592-1/ Link for SUSE-SU-2024:1592-1 https://lists.suse.com/pipermail/sle-security-updates/2024-May/018499.html E-Mail link for SUSE-SU-2024:1592-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1223256 SUSE Bug 1223256 https://www.suse.com/security/cve/CVE-2023-50010/ SUSE CVE CVE-2023-50010 page SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP5 openSUSE Leap 15.5 ffmpeg-4-4.4-150400.3.27.1 ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 ffmpeg-4-private-devel-4.4-150400.3.27.1 libavcodec58_134-4.4-150400.3.27.1 libavcodec58_134-32bit-4.4-150400.3.27.1 libavcodec58_134-64bit-4.4-150400.3.27.1 libavdevice58_13-4.4-150400.3.27.1 libavdevice58_13-32bit-4.4-150400.3.27.1 libavdevice58_13-64bit-4.4-150400.3.27.1 libavfilter7_110-4.4-150400.3.27.1 libavfilter7_110-32bit-4.4-150400.3.27.1 libavfilter7_110-64bit-4.4-150400.3.27.1 libavformat58_76-4.4-150400.3.27.1 libavformat58_76-32bit-4.4-150400.3.27.1 libavformat58_76-64bit-4.4-150400.3.27.1 libavresample4_0-4.4-150400.3.27.1 libavresample4_0-32bit-4.4-150400.3.27.1 libavresample4_0-64bit-4.4-150400.3.27.1 libavutil56_70-4.4-150400.3.27.1 libavutil56_70-32bit-4.4-150400.3.27.1 libavutil56_70-64bit-4.4-150400.3.27.1 libpostproc55_9-4.4-150400.3.27.1 libpostproc55_9-32bit-4.4-150400.3.27.1 libpostproc55_9-64bit-4.4-150400.3.27.1 libswresample3_9-4.4-150400.3.27.1 libswresample3_9-32bit-4.4-150400.3.27.1 libswresample3_9-64bit-4.4-150400.3.27.1 libswscale5_9-4.4-150400.3.27.1 libswscale5_9-32bit-4.4-150400.3.27.1 libswscale5_9-64bit-4.4-150400.3.27.1 libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libpostproc55_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libpostproc55_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ffmpeg-4-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ffmpeg-4-private-devel-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavdevice58_13-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavfilter7_110-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavresample4_0-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libpostproc55_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libswscale5_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libpostproc55_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libpostproc55_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libavcodec58_134-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libavformat58_76-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libavutil56_70-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libswresample3_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 libswscale5_9-4.4-150400.3.27.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 ffmpeg-4-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 ffmpeg-4-private-devel-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavcodec58_134-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavcodec58_134-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavdevice58_13-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavdevice58_13-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavfilter7_110-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavfilter7_110-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavformat58_76-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavformat58_76-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavresample4_0-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavresample4_0-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavutil56_70-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libavutil56_70-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libpostproc55_9-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libpostproc55_9-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libswresample3_9-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libswresample3_9-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libswscale5_9-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 libswscale5_9-32bit-4.4-150400.3.27.1 as a component of openSUSE Leap 15.5 Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the set_encoder_id function in /fftools/ffmpeg_enc.c component. CVE-2023-50010 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libpostproc55_9-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libpostproc55_9-4.4-150400.3.27.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ffmpeg-4-private-devel-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavdevice58_13-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavfilter7_110-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavresample4_0-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libpostproc55_9-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libswscale5_9-4.4-150400.3.27.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libpostproc55_9-4.4-150400.3.27.1 SUSE Linux Enterprise Server 15 SP4-LTSS:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libpostproc55_9-4.4-150400.3.27.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libavcodec58_134-4.4-150400.3.27.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libavformat58_76-4.4-150400.3.27.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libavutil56_70-4.4-150400.3.27.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libswresample3_9-4.4-150400.3.27.1 SUSE Linux Enterprise Workstation Extension 15 SP5:libswscale5_9-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavcodec-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavdevice-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavfilter-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavformat-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavresample-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libavutil-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libpostproc-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libswresample-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-libswscale-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:ffmpeg-4-private-devel-4.4-150400.3.27.1 openSUSE Leap 15.5:libavcodec58_134-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavcodec58_134-4.4-150400.3.27.1 openSUSE Leap 15.5:libavdevice58_13-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavdevice58_13-4.4-150400.3.27.1 openSUSE Leap 15.5:libavfilter7_110-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavfilter7_110-4.4-150400.3.27.1 openSUSE Leap 15.5:libavformat58_76-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavformat58_76-4.4-150400.3.27.1 openSUSE Leap 15.5:libavresample4_0-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavresample4_0-4.4-150400.3.27.1 openSUSE Leap 15.5:libavutil56_70-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libavutil56_70-4.4-150400.3.27.1 openSUSE Leap 15.5:libpostproc55_9-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libpostproc55_9-4.4-150400.3.27.1 openSUSE Leap 15.5:libswresample3_9-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libswresample3_9-4.4-150400.3.27.1 openSUSE Leap 15.5:libswscale5_9-32bit-4.4-150400.3.27.1 openSUSE Leap 15.5:libswscale5_9-4.4-150400.3.27.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241592-1/ https://www.suse.com/security/cve/CVE-2023-50010.html CVE-2023-50010 https://bugzilla.suse.com/1223256 SUSE Bug 1223256