Security update for ffmpeg-4 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3301-1 Final 1 1 2024-09-18T12:51:40Z current 2024-09-18T12:51:40Z 2024-09-18T12:51:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ffmpeg-4 This update for ffmpeg-4 fixes the following issues: - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. (bsc#1229026) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container containers/open-webui:0-2024-3301,SUSE-2024-3301,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3301,SUSE-SLE-Product-WE-15-SP6-2024-3301,openSUSE-SLE-15.6-2024-3301 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243301-1/ Link for SUSE-SU-2024:3301-1 https://lists.suse.com/pipermail/sle-updates/2024-September/036954.html E-Mail link for SUSE-SU-2024:3301-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1229026 SUSE Bug 1229026 https://www.suse.com/security/cve/CVE-2024-7055/ SUSE CVE CVE-2024-7055 page Container containers/open-webui:0 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 openSUSE Leap 15.6 ffmpeg-4-4.4-150600.13.13.1 libavcodec58_134-4.4-150600.13.13.1 libavdevice58_13-4.4-150600.13.13.1 libavfilter7_110-4.4-150600.13.13.1 libavformat58_76-4.4-150600.13.13.1 libavresample4_0-4.4-150600.13.13.1 libavutil56_70-4.4-150600.13.13.1 libpostproc55_9-4.4-150600.13.13.1 libswresample3_9-4.4-150600.13.13.1 libswscale5_9-4.4-150600.13.13.1 ffmpeg-4-libavcodec-devel-4.4-150600.13.13.1 ffmpeg-4-libavdevice-devel-4.4-150600.13.13.1 ffmpeg-4-libavfilter-devel-4.4-150600.13.13.1 ffmpeg-4-libavformat-devel-4.4-150600.13.13.1 ffmpeg-4-libavresample-devel-4.4-150600.13.13.1 ffmpeg-4-libavutil-devel-4.4-150600.13.13.1 ffmpeg-4-libpostproc-devel-4.4-150600.13.13.1 ffmpeg-4-libswresample-devel-4.4-150600.13.13.1 ffmpeg-4-libswscale-devel-4.4-150600.13.13.1 ffmpeg-4-private-devel-4.4-150600.13.13.1 libavcodec58_134-32bit-4.4-150600.13.13.1 libavcodec58_134-64bit-4.4-150600.13.13.1 libavdevice58_13-32bit-4.4-150600.13.13.1 libavdevice58_13-64bit-4.4-150600.13.13.1 libavfilter7_110-32bit-4.4-150600.13.13.1 libavfilter7_110-64bit-4.4-150600.13.13.1 libavformat58_76-32bit-4.4-150600.13.13.1 libavformat58_76-64bit-4.4-150600.13.13.1 libavresample4_0-32bit-4.4-150600.13.13.1 libavresample4_0-64bit-4.4-150600.13.13.1 libavutil56_70-32bit-4.4-150600.13.13.1 libavutil56_70-64bit-4.4-150600.13.13.1 libpostproc55_9-32bit-4.4-150600.13.13.1 libpostproc55_9-64bit-4.4-150600.13.13.1 libswresample3_9-32bit-4.4-150600.13.13.1 libswresample3_9-64bit-4.4-150600.13.13.1 libswscale5_9-32bit-4.4-150600.13.13.1 libswscale5_9-64bit-4.4-150600.13.13.1 ffmpeg-4-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavcodec58_134-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavdevice58_13-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavfilter7_110-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavformat58_76-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavresample4_0-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libavutil56_70-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libpostproc55_9-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libswresample3_9-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 libswscale5_9-4.4-150600.13.13.1 as a component of Container containers/open-webui:0 ffmpeg-4-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavcodec-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavdevice-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavfilter-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavformat-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavresample-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libavutil-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libpostproc-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libswresample-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-libswscale-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 ffmpeg-4-private-devel-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavcodec58_134-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavdevice58_13-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavfilter7_110-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavformat58_76-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavresample4_0-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavutil56_70-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libpostproc55_9-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libswresample3_9-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libswscale5_9-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libavcodec58_134-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 libavformat58_76-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 libavutil56_70-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 libswresample3_9-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 libswscale5_9-4.4-150600.13.13.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 ffmpeg-4-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavcodec-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavdevice-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavfilter-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavformat-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavresample-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libavutil-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libpostproc-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libswresample-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-libswscale-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 ffmpeg-4-private-devel-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavcodec58_134-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavcodec58_134-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavdevice58_13-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavdevice58_13-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavfilter7_110-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavfilter7_110-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavformat58_76-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavformat58_76-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavresample4_0-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavresample4_0-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavutil56_70-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libavutil56_70-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libpostproc55_9-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libpostproc55_9-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libswresample3_9-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libswresample3_9-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libswscale5_9-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 libswscale5_9-32bit-4.4-150600.13.13.1 as a component of openSUSE Leap 15.6 A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651. CVE-2024-7055 Container containers/open-webui:0:ffmpeg-4-4.4-150600.13.13.1 Container containers/open-webui:0:libavcodec58_134-4.4-150600.13.13.1 Container containers/open-webui:0:libavdevice58_13-4.4-150600.13.13.1 Container containers/open-webui:0:libavfilter7_110-4.4-150600.13.13.1 Container containers/open-webui:0:libavformat58_76-4.4-150600.13.13.1 Container containers/open-webui:0:libavresample4_0-4.4-150600.13.13.1 Container containers/open-webui:0:libavutil56_70-4.4-150600.13.13.1 Container containers/open-webui:0:libpostproc55_9-4.4-150600.13.13.1 Container containers/open-webui:0:libswresample3_9-4.4-150600.13.13.1 Container containers/open-webui:0:libswscale5_9-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavcodec-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavdevice-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavfilter-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavformat-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavresample-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libavutil-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libpostproc-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libswresample-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-libswscale-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:ffmpeg-4-private-devel-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavcodec58_134-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavdevice58_13-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavfilter7_110-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavformat58_76-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavresample4_0-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libavutil56_70-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libpostproc55_9-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libswresample3_9-4.4-150600.13.13.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libswscale5_9-4.4-150600.13.13.1 SUSE Linux Enterprise Workstation Extension 15 SP6:libavcodec58_134-4.4-150600.13.13.1 SUSE Linux Enterprise Workstation Extension 15 SP6:libavformat58_76-4.4-150600.13.13.1 SUSE Linux Enterprise Workstation Extension 15 SP6:libavutil56_70-4.4-150600.13.13.1 SUSE Linux Enterprise Workstation Extension 15 SP6:libswresample3_9-4.4-150600.13.13.1 SUSE Linux Enterprise Workstation Extension 15 SP6:libswscale5_9-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavcodec-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavdevice-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavfilter-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavformat-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavresample-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libavutil-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libpostproc-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libswresample-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-libswscale-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:ffmpeg-4-private-devel-4.4-150600.13.13.1 openSUSE Leap 15.6:libavcodec58_134-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavcodec58_134-4.4-150600.13.13.1 openSUSE Leap 15.6:libavdevice58_13-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavdevice58_13-4.4-150600.13.13.1 openSUSE Leap 15.6:libavfilter7_110-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavfilter7_110-4.4-150600.13.13.1 openSUSE Leap 15.6:libavformat58_76-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavformat58_76-4.4-150600.13.13.1 openSUSE Leap 15.6:libavresample4_0-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavresample4_0-4.4-150600.13.13.1 openSUSE Leap 15.6:libavutil56_70-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libavutil56_70-4.4-150600.13.13.1 openSUSE Leap 15.6:libpostproc55_9-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libpostproc55_9-4.4-150600.13.13.1 openSUSE Leap 15.6:libswresample3_9-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libswresample3_9-4.4-150600.13.13.1 openSUSE Leap 15.6:libswscale5_9-32bit-4.4-150600.13.13.1 openSUSE Leap 15.6:libswscale5_9-4.4-150600.13.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243301-1/ https://www.suse.com/security/cve/CVE-2024-7055.html CVE-2024-7055 https://bugzilla.suse.com/1229026 SUSE Bug 1229026