Security update for ffmpeg SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3193-1 Final 1 1 2021-09-23T09:25:21Z current 2021-09-23T09:25:21Z 2021-09-23T09:25:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-3193,SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-3193,SUSE-SLE-Module-Desktop-Applications-15-SP3-2021-3193,SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2021-3193,SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-3193,SUSE-SLE-Product-WE-15-SP2-2021-3193,SUSE-SLE-Product-WE-15-SP3-2021-3193 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213193-1/ Link for SUSE-SU-2021:3193-1 https://lists.suse.com/pipermail/sle-security-updates/2021-September/009495.html E-Mail link for SUSE-SU-2021:3193-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1189724 SUSE Bug 1189724 https://www.suse.com/security/cve/CVE-2021-38171/ SUSE CVE CVE-2021-38171 page SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP2 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 ffmpeg-3.4.2-11.11.1 ffmpeg-private-devel-3.4.2-11.11.1 libavcodec-devel-3.4.2-11.11.1 libavcodec57-3.4.2-11.11.1 libavcodec57-32bit-3.4.2-11.11.1 libavcodec57-64bit-3.4.2-11.11.1 libavdevice-devel-3.4.2-11.11.1 libavdevice57-3.4.2-11.11.1 libavdevice57-32bit-3.4.2-11.11.1 libavdevice57-64bit-3.4.2-11.11.1 libavfilter-devel-3.4.2-11.11.1 libavfilter6-3.4.2-11.11.1 libavfilter6-32bit-3.4.2-11.11.1 libavfilter6-64bit-3.4.2-11.11.1 libavformat-devel-3.4.2-11.11.1 libavformat57-3.4.2-11.11.1 libavformat57-32bit-3.4.2-11.11.1 libavformat57-64bit-3.4.2-11.11.1 libavresample-devel-3.4.2-11.11.1 libavresample3-3.4.2-11.11.1 libavresample3-32bit-3.4.2-11.11.1 libavresample3-64bit-3.4.2-11.11.1 libavutil-devel-3.4.2-11.11.1 libavutil55-3.4.2-11.11.1 libavutil55-32bit-3.4.2-11.11.1 libavutil55-64bit-3.4.2-11.11.1 libpostproc-devel-3.4.2-11.11.1 libpostproc54-3.4.2-11.11.1 libpostproc54-32bit-3.4.2-11.11.1 libpostproc54-64bit-3.4.2-11.11.1 libswresample-devel-3.4.2-11.11.1 libswresample2-3.4.2-11.11.1 libswresample2-32bit-3.4.2-11.11.1 libswresample2-64bit-3.4.2-11.11.1 libswscale-devel-3.4.2-11.11.1 libswscale4-3.4.2-11.11.1 libswscale4-32bit-3.4.2-11.11.1 libswscale4-64bit-3.4.2-11.11.1 libavcodec57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavformat57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavresample3-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavresample3-32bit-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavutil-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavutil55-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libpostproc-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libpostproc54-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libswresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libswresample2-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libswscale-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libswscale4-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libavcodec57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavformat57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavresample3-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavresample3-64bit-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavutil-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libavutil55-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libpostproc-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libpostproc54-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libswresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libswresample2-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libswscale-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libswscale4-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 ffmpeg-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP2 libavdevice57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP2 libavfilter6-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP2 ffmpeg-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 libavdevice57-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 libavfilter6-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 libavcodec-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libavformat-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libavresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libavresample3-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 libavcodec-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libavformat-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libavresample-devel-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 libavresample3-3.4.2-11.11.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted. CVE-2021-38171 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavcodec57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavformat57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavresample3-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavresample3-32bit-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavutil-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libavutil55-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libpostproc-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libpostproc54-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libswresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libswresample2-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libswscale-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libswscale4-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavcodec57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavformat57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavresample3-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavresample3-64bit-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavutil-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libavutil55-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libpostproc-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libpostproc54-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libswresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libswresample2-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libswscale-devel-3.4.2-11.11.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libswscale4-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP2:ffmpeg-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP2:libavdevice57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP2:libavfilter6-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:ffmpeg-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libavdevice57-3.4.2-11.11.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libavfilter6-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libavcodec-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libavformat-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libavresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP2:libavresample3-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libavcodec-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libavformat-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libavresample-devel-3.4.2-11.11.1 SUSE Linux Enterprise Workstation Extension 15 SP3:libavresample3-3.4.2-11.11.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213193-1/ https://www.suse.com/security/cve/CVE-2021-38171.html CVE-2021-38171 https://bugzilla.suse.com/1189724 SUSE Bug 1189724