Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 555
Alerts This Week
Warning Icon 1 555

openSUSE: rav1e Moderate Command Injection CVE-2024-58266 2025:03092-1

opensuse
Calendar Grey September 5, 2025
Dist Opensuse Esm H88
A security patch for rav1e released by OpenSUSE mitigates command execution vulnerabilities classified as having moderate risk.
An update that solves one vulnerability and has one security fix can now be installed.

Description

This update for rav1e fixes the following issues:

* Update crate shlex to 1.3.0:

* CVE-2024-58266: Fixed command injection (bsc#1247207)

* RUSTSEC-2024-0006: Fixed multiple issues involving quote API (bsc#1230028)

Topics%20covered

Topics Covered

security advisory moderate command injection OpenSUSE advisory ID rav1e

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2025-3092=1

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* librav1e0-debuginfo-0.5.1+0-150400.3.3.1

* rav1e-debuginfo-0.5.1+0-150400.3.3.1

* rav1e-0.5.1+0-150400.3.3.1

* rav1e-debugsource-0.5.1+0-150400.3.3.1

* librav1e0-0.5.1+0-150400.3.3.1

* rav1e-devel-0.5.1+0-150400.3.3.1

* openSUSE Leap 15.4 (x86_64)

* librav1e0-32bit-debuginfo-0.5.1+0-150400.3.3.1

* librav1e0-32bit-0.5.1+0-150400.3.3.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* librav1e0-64bit-0.5.1+0-150400.3.3.1

* librav1e0-64bit-debuginfo-0.5.1+0-150400.3.3.1

References

* bsc#1230028

* bsc#1247207

## References:

* https://www.suse.com/security/cve/CVE-2024-58266.html

* https://bugzilla.suse.com/show_bug.cgi?id=1230028

* https://bugzilla.suse.com/show_bug.cgi?id=1247207

Announcement ID: SUSE-SU-2025:03092-1
Release Date: 2025-09-05T17:20:55Z
Affected Products: * openSUSE Leap 15.4

Topics%20covered

Topics Covered

security advisory moderate command injection OpenSUSE advisory ID rav1e

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.