Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 527
Alerts This Week
Warning Icon 1 527

SUSE: 2021:2929-1 Important: ffmpeg Denial Of Service and Overflow

suse
Calendar Grey September 2, 2021
Scroller Suse
This enhancement for SUSE addresses critical vulnerabilities in ffmpeg impacting numerous versions.
An update that fixes 31 vulnerabilities is now available

Summary

This update for ffmpeg fixes the following issues: - CVE-2019-9721: Fixed a denial of service in the subtitle decoder in handle_open_brace from libavcodec/htmlsubtitles.c (bsc#1129714). - CVE-2020-22046: Fixed a denial of service vulnerability due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c (bsc#1186849). - CVE-2020-22048: Fixed a denial of service vulnerability due to a memory leak in the ff_frame_pool_get function in framepool.c (bsc#1186859). - CVE-2020-22049: Fixed a denial of service vulnerability caused by a memory leak in the wtvfile_open_sector function in wtvdec.c (bsc#1186861). - CVE-2020-22054: Fixed a denial of service vulnerability due to a memory leak in the av_dict_set function in dict.c (bsc#1186863).

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow SUSE ffmpeg CaaS Platform

References

#1129714 #1172640 #1186406 #1186583 #1186586

#1186587 #1186596 #1186597 #1186598 #1186600

#1186603 #1186604 #1186605 #1186613 #1186614

#1186615 #1186616 #1186658 #1186660 #1186757

#1186758 #1186762 #1186763 #1186849 #1186859

#1186861 #1186863 #1189142 #1189348 #1189350

Cross- CVE-2019-17539 CVE-2019-9721 CVE-2020-13904

CVE-2020-20448 CVE-2020-20451 CVE-2020-21041

CVE-2020-21688 CVE-2020-21697 CVE-2020-22015

CVE-2020-22016 CVE-2020-22017 CVE-2020-22019

CVE-2020-22020 CVE-2020-22021 CVE-2020-22022

CVE-2020-22023 CVE-2020-22025 CVE-2020-22026

CVE-2020-22031 CVE-2020-22032 CVE-2020-22033

CVE-2020-22034 CVE-2020-22038 CVE-2020-22039

CVE-2020-22043 CVE-2020-22044 CVE-2020-22046

CVE-2020-22048...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2929-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow SUSE ffmpeg CaaS Platform

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.