Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Can sandbox isolation stop malware?
Loading...
Explore Latest Linux Security advisories
We found 175 articles for you...
172
security advisorydenial of serviceUbuntuUbuntu 26.04 LTS FFmpeg Critical Denial of Service Issues USN-8469-1
Several security issues were fixed in FFmpeg.. ========================================================================== Ubuntu Security Notice USN-8469-1 June 24, 2026 ffmpeg vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in FFmpeg. Software Description: - ffmpeg: Tools for transcoding, streaming and playing of multimedia files Details: Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in certain error-handling paths of its TensorFlow DNN backend. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2025-12343) Quang Luong discovered that FFmpeg incorrectly handled certain subsample data. An attacker could possibly use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2026-40962) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS ffmpeg 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavcodec-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavcodec-extra 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavcodec-extra62 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavcodec62 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavdevice-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavdevice62 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavfilter-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavfilter-extra 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavfilter-extra11 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavfilter11 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavformat-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavformat-extra 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavformat-extra62 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavformat62 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavutil-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libavutil60 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libswresample-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libswresample6 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libswscale-dev 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro libswscale9 7:8.0.1-3ubuntu2+esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavcodec-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavcodec-extra 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavcodec-extra60 7:6.1.1-3ubuntu5+esm10 Available withUbuntu Pro libavcodec60 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavdevice-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavdevice60 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavfilter-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavfilter-extra 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavfilter-extra9 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavfilter9 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavformat-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavformat-extra 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavformat-extra60 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavformat60 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavutil-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libavutil58 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libpostproc-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libpostproc57 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libswresample-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libswresample4 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libswscale-dev 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro libswscale7 7:6.1.1-3ubuntu5+esm10 Available with Ubuntu Pro Ubuntu 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavcodec-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavcodec-extra 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavdevice-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavfilter-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavfilter-extra 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavformat-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavformat-extra 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavutil-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libpostproc-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libswresample-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libswscale-dev 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm12 Available with Ubuntu Pro Ubuntu 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavcodec-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavcodec-extra 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavcodec58 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavdevice-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavdevice58 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavfilter-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavfilter-extra 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavfilter7 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavformat-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavformat58 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavresample-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavresample4 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavutil-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libavutil56 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libpostproc-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libpostproc55 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libswresample-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libswresample3 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libswscale-dev 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro libswscale5 7:4.2.7-0ubuntu0.1+esm13 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8469-1 CVE-2025-12343, CVE-2026-40962 . Security updates for FFmpeg fix several issues affecting Ubuntu users across multiple LTS versions, mitigating potentialattacks.. FFmpeg security update, Ubuntu security notice, multimedia tools update. . LinuxSecurity.com Team
Jun 24, 2026
Ubuntu
89
security advisorymoderatedenial of serviceFedora 44 FFmpeg Moderate Denial of Service Resolution 2026-bc8f441ba4
The latest stable FFmpeg release from the 8.1 release branch. https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n8.1.2:/Changelog Fixes CVE-2026-30999 .. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-bc8f441ba4 2026-06-23 01:06:46.785073+00:00 -------------------------------------------------------------------------------- Name : ffmpeg Product : Fedora 44 Version : 8.1.2 Release : 1.fc44 URL : https://ffmpeg.org/ Summary : A complete solution to record, convert and stream audio and video Description : FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards committee, the community or a corporation. This build of ffmpeg is limited in the number of codecs supported. -------------------------------------------------------------------------------- Update Information: The latest stable FFmpeg release from the 8.1 release branch. https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n8.1.2:/Changelog Fixes CVE-2026-30999 . -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 17 2026 Dominik Mierzejewski - 8.1.2-1 - Updated to 8.1.2 (resolves rhbz#2489751) * Thu May 21 2026 Dominik Mierzejewski - 8.1.1-2 - Add Conflicts to prevent installation of mismatched -free and -freeworld builds -------------------------------------------------------------------------------- References: [ 1 ] Bug #2457971 - CVE-2026-30999 ffmpeg: FFmpeg: Denial of Service via heap buffer overflow in av_bprint_finalize() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2457971 [ 2 ] Bug #2489751 - ffmpeg-8.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2489751 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-bc8f441ba4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 22, 2026
Fedora
87
security advisorydenial of servicecriticalDebian FFmpeg Critical Denial of Service Code Execution Vuln DSA-6361-1
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the stable distribution (trixie), these problems have been fixed in version 7:7.1.5-0+deb13u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6361-1
Jun 22, 2026
Debian
100
security advisorybuffer overflowSuSESUSE ffmpeg Important Security Fix for Multiple Vulnerabilities 2026-2444-1
An update that solves 11 vulnerabilities can now be installed.. # Security update for ffmpeg-4 Announcement ID: SUSE-SU-2026:2444-1 Release Date: 2026-06-18T08:51:46Z Rating: important References: * bsc#1220545 * bsc#1234030 * bsc#1237561 * bsc#1249393 * bsc#1249431 * bsc#1255392 * bsc#1262047 * bsc#1262237 Cross-References: * CVE-2023-6601 * CVE-2024-35366 * CVE-2024-35368 * CVE-2024-36618 * CVE-2025-10256 * CVE-2025-1594 * CVE-2025-59728 * CVE-2025-63757 * CVE-2025-9951 * CVE-2026-30997 * CVE-2026-40962 CVSS scores: * CVE-2023-6601 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2023-6601 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2023-6601 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2024-35366 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-35366 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-35366 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2024-35368 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-35368 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-35368 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36618 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2024-36618 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2024-36618 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-10256 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-10256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-10256 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-10256 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-1594 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-1594( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-1594 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-1594 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-1594 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-59728 ( SUSE ): 7.4 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-59728 ( SUSE ): 7.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-59728 ( NVD ): 8.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-63757 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-63757 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-63757 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-9951 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-9951 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-9951 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-30997 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-30997 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-30997 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40962 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-40962 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-40962 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-40962 ( NVD ): 4.9CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for ffmpeg-4 fixes the following issues Update to version 4.4.7: * CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545). * CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the i (bsc#1234030). * CVE-2025-1594: stack-based buffer overflow in function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder (bsc#1237561). * CVE-2025-9951: heap-based buffer overflow in jpeg2000dec (bsc#1249393). * CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431). * CVE-2025-63757: accumulation of filtered pixel values can lead to an integer overflow (bsc#1255392). * CVE-2026-30997: Denial of Service via out-of-bounds read (bsc#1262047). * CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2444=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2444=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -tpatch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2444=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2444=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2444=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * ffmpeg-4-libswscale-devel-4.4.7-150400.3.67.1 * libavfilter7_110-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-debuginfo-4.4.7-150400.3.67.1 * libavresample4_0-debuginfo-4.4.7-150400.3.67.1 * libavutil56_70-4.4.7-150400.3.67.1 * libpostproc55_9-4.4.7-150400.3.67.1 * ffmpeg-4-libavutil-devel-4.4.7-150400.3.67.1 * libavdevice58_13-4.4.7-150400.3.67.1 * ffmpeg-4-libavfilter-devel-4.4.7-150400.3.67.1 * ffmpeg-4-libpostproc-devel-4.4.7-150400.3.67.1 * ffmpeg-4-libavformat-devel-4.4.7-150400.3.67.1 * libswresample3_9-4.4.7-150400.3.67.1 * ffmpeg-4-debugsource-4.4.7-150400.3.67.1 * libavformat58_76-4.4.7-150400.3.67.1 * ffmpeg-4-libavcodec-devel-4.4.7-150400.3.67.1 * libavresample4_0-4.4.7-150400.3.67.1 * libswresample3_9-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-4.4.7-150400.3.67.1 * libpostproc55_9-debuginfo-4.4.7-150400.3.67.1 * libavformat58_76-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-4.4.7-150400.3.67.1 * ffmpeg-4-libavdevice-devel-4.4.7-150400.3.67.1 * libavutil56_70-debuginfo-4.4.7-150400.3.67.1 * ffmpeg-4-libswresample-devel-4.4.7-150400.3.67.1 * libswscale5_9-debuginfo-4.4.7-150400.3.67.1 * ffmpeg-4-private-devel-4.4.7-150400.3.67.1 * ffmpeg-4-debuginfo-4.4.7-150400.3.67.1 * ffmpeg-4-libavresample-devel-4.4.7-150400.3.67.1 * libavdevice58_13-debuginfo-4.4.7-150400.3.67.1 * ffmpeg-4-4.4.7-150400.3.67.1 * libavfilter7_110-4.4.7-150400.3.67.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libavcodec58_134-64bit-debuginfo-4.4.7-150400.3.67.1 * libavdevice58_13-64bit-debuginfo-4.4.7-150400.3.67.1 *libavfilter7_110-64bit-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-64bit-4.4.7-150400.3.67.1 * libavutil56_70-64bit-4.4.7-150400.3.67.1 * libpostproc55_9-64bit-debuginfo-4.4.7-150400.3.67.1 * libavutil56_70-64bit-debuginfo-4.4.7-150400.3.67.1 * libavformat58_76-64bit-4.4.7-150400.3.67.1 * libavresample4_0-64bit-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-64bit-4.4.7-150400.3.67.1 * libavresample4_0-64bit-4.4.7-150400.3.67.1 * libavformat58_76-64bit-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-64bit-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-64bit-4.4.7-150400.3.67.1 * libavdevice58_13-64bit-4.4.7-150400.3.67.1 * libswresample3_9-64bit-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-64bit-4.4.7-150400.3.67.1 * libavfilter7_110-64bit-4.4.7-150400.3.67.1 * openSUSE Leap 15.4 (x86_64) * libpostproc55_9-32bit-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-32bit-4.4.7-150400.3.67.1 * libswscale5_9-32bit-debuginfo-4.4.7-150400.3.67.1 * libavdevice58_13-32bit-4.4.7-150400.3.67.1 * libavutil56_70-32bit-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-32bit-4.4.7-150400.3.67.1 * libavfilter7_110-32bit-4.4.7-150400.3.67.1 * libavutil56_70-32bit-4.4.7-150400.3.67.1 * libavcodec58_134-32bit-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-32bit-debuginfo-4.4.7-150400.3.67.1 * libavformat58_76-32bit-debuginfo-4.4.7-150400.3.67.1 * libavresample4_0-32bit-debuginfo-4.4.7-150400.3.67.1 * libavformat58_76-32bit-4.4.7-150400.3.67.1 * libavresample4_0-32bit-4.4.7-150400.3.67.1 * libavfilter7_110-32bit-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-32bit-4.4.7-150400.3.67.1 * libavdevice58_13-32bit-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-32bit-4.4.7-150400.3.67.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libavformat58_76-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-4.4.7-150400.3.67.1 *libswresample3_9-4.4.7-150400.3.67.1 * ffmpeg-4-debugsource-4.4.7-150400.3.67.1 * libavutil56_70-4.4.7-150400.3.67.1 * libavformat58_76-4.4.7-150400.3.67.1 * libavutil56_70-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-4.4.7-150400.3.67.1 * ffmpeg-4-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-4.4.7-150400.3.67.1 * libpostproc55_9-debuginfo-4.4.7-150400.3.67.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libavformat58_76-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-4.4.7-150400.3.67.1 * libswresample3_9-4.4.7-150400.3.67.1 * ffmpeg-4-debugsource-4.4.7-150400.3.67.1 * libavutil56_70-4.4.7-150400.3.67.1 * libavformat58_76-4.4.7-150400.3.67.1 * libavutil56_70-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-4.4.7-150400.3.67.1 * ffmpeg-4-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-4.4.7-150400.3.67.1 * libpostproc55_9-debuginfo-4.4.7-150400.3.67.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libavformat58_76-debuginfo-4.4.7-150400.3.67.1 * libswscale5_9-4.4.7-150400.3.67.1 * libswresample3_9-4.4.7-150400.3.67.1 * ffmpeg-4-debugsource-4.4.7-150400.3.67.1 * libavutil56_70-4.4.7-150400.3.67.1 * libavformat58_76-4.4.7-150400.3.67.1 * libavutil56_70-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-4.4.7-150400.3.67.1 * ffmpeg-4-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-4.4.7-150400.3.67.1 * libpostproc55_9-debuginfo-4.4.7-150400.3.67.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libavformat58_76-debuginfo-4.4.7-150400.3.67.1 *libswscale5_9-4.4.7-150400.3.67.1 * libswresample3_9-4.4.7-150400.3.67.1 * ffmpeg-4-debugsource-4.4.7-150400.3.67.1 * libavutil56_70-4.4.7-150400.3.67.1 * libavformat58_76-4.4.7-150400.3.67.1 * libavutil56_70-debuginfo-4.4.7-150400.3.67.1 * libpostproc55_9-4.4.7-150400.3.67.1 * ffmpeg-4-debuginfo-4.4.7-150400.3.67.1 * libswresample3_9-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-debuginfo-4.4.7-150400.3.67.1 * libavcodec58_134-4.4.7-150400.3.67.1 * libpostproc55_9-debuginfo-4.4.7-150400.3.67.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6601.html * https://www.suse.com/security/cve/CVE-2024-35366.html * https://www.suse.com/security/cve/CVE-2024-35368.html * https://www.suse.com/security/cve/CVE-2024-36618.html * https://www.suse.com/security/cve/CVE-2025-10256.html * https://www.suse.com/security/cve/CVE-2025-1594.html * https://www.suse.com/security/cve/CVE-2025-59728.html * https://www.suse.com/security/cve/CVE-2025-63757.html * https://www.suse.com/security/cve/CVE-2025-9951.html * https://www.suse.com/security/cve/CVE-2026-30997.html * https://www.suse.com/security/cve/CVE-2026-40962.html * https://bugzilla.suse.com/show_bug.cgi?id=1220545 * https://bugzilla.suse.com/show_bug.cgi?id=1234030 * https://bugzilla.suse.com/show_bug.cgi?id=1237561 * https://bugzilla.suse.com/show_bug.cgi?id=1249393 * https://bugzilla.suse.com/show_bug.cgi?id=1249431 * https://bugzilla.suse.com/show_bug.cgi?id=1255392 * https://bugzilla.suse.com/show_bug.cgi?id=1262047 * https://bugzilla.suse.com/show_bug.cgi?id=1262237 . Install a crucial security update for ffmpeg-4 on SUSE to resolve multiple critical issues affecting system performance.. SUSE Security Update, ffmpeg-4 Patch, Linux Security Fix, Vulnerability Management. . LinuxSecurity.com Team
Jun 18, 2026
SuSE
202
security advisorymoderatebuffer overflowopenSUSE Tumbleweed ffmpeg Moderate Security Update CVE-2026-30997
An update that solves one vulnerability can now be installed.. # ffmpeg-7-7.1.4-3.1 on GA media Announcement ID: openSUSE-SU-2026:11009-1 Rating: moderate Cross-References: * CVE-2026-30997 CVSS scores: * CVE-2026-30997 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-30997 ( SUSE ): 7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ffmpeg-7 7.1.4-3.1 * ffmpeg-7-libavcodec-devel 7.1.4-3.1 * ffmpeg-7-libavdevice-devel 7.1.4-3.1 * ffmpeg-7-libavfilter-devel 7.1.4-3.1 * ffmpeg-7-libavformat-devel 7.1.4-3.1 * ffmpeg-7-libavutil-devel 7.1.4-3.1 * ffmpeg-7-libpostproc-devel 7.1.4-3.1 * ffmpeg-7-libswresample-devel 7.1.4-3.1 * ffmpeg-7-libswscale-devel 7.1.4-3.1 * libavcodec61 7.1.4-3.1 * libavdevice61 7.1.4-3.1 * libavfilter10 7.1.4-3.1 * libavformat61 7.1.4-3.1 * libavutil59 7.1.4-3.1 * libpostproc58 7.1.4-3.1 * libswresample5 7.1.4-3.1 * libswscale8 7.1.4-3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-30997.html . # ffmpeg-7-7.1.4-3.1 on GA media Announcement ID: openSUSE-SU-2026:11009-1 Rating: moderate Cross-Re. update, solves, vulnerability, installed, ffmpeg-7-7, media, annou. . LinuxSecurity.com Team
Jun 13, 2026
OpenSUSE
202
security advisorybuffer overflowimportantopenSUSE Leap 16.0 ffmpeg-4 Major Buffer Overflow Fix 2026-20914-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20914-1 Rating: important References: * bsc#1262047 Cross-References: * CVE-2026-30997 CVSS scores: * CVE-2026-30997 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-30997 ( SUSE ): 7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - CVE-2026-30997: avcodec/av1dec: check that primary_ref_frame is within range (bsc#1262047) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-299=1 Package List: - openSUSE Leap 16.0: ffmpeg-4-4.4.7-bp160.2.1 ffmpeg-4-libavcodec-devel-4.4.7-bp160.2.1 ffmpeg-4-libavdevice-devel-4.4.7-bp160.2.1 ffmpeg-4-libavfilter-devel-4.4.7-bp160.2.1 ffmpeg-4-libavformat-devel-4.4.7-bp160.2.1 ffmpeg-4-libavresample-devel-4.4.7-bp160.2.1 ffmpeg-4-libavutil-devel-4.4.7-bp160.2.1 ffmpeg-4-libpostproc-devel-4.4.7-bp160.2.1 ffmpeg-4-libswresample-devel-4.4.7-bp160.2.1 ffmpeg-4-libswscale-devel-4.4.7-bp160.2.1 ffmpeg-4-private-devel-4.4.7-bp160.2.1 libavcodec58_134-4.4.7-bp160.2.1 libavdevice58_13-4.4.7-bp160.2.1 libavfilter7_110-4.4.7-bp160.2.1 libavformat58_76-4.4.7-bp160.2.1 libavresample4_0-4.4.7-bp160.2.1 libavutil56_70-4.4.7-bp160.2.1 libpostproc55_9-4.4.7-bp160.2.1 libswresample3_9-4.4.7-bp160.2.1 libswscale5_9-4.4.7-bp160.2.1 References: *https://www.suse.com/security/cve/CVE-2026-30997.html . Update resolves a critical buffer overflow in ffmpeg-4 for openSUSE Leap 16.0, ensuring system stability and security.. openSUSE security update, ffmpeg bug fix, critical buffer overflow. . LinuxSecurity.com Team
Jun 08, 2026
OpenSUSE
202
security advisorymoderateDoSopenSUSE Tumbleweed ffmpeg Moderate DoS Threat Advisory 2026-10931-1
An update that solves one vulnerability can now be installed.. # ffmpeg-4-4.4.7-3.1 on GA media Announcement ID: openSUSE-SU-2026:10931-1 Rating: moderate Cross-References: * CVE-2026-30997 CVSS scores: * CVE-2026-30997 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-30997 ( SUSE ): 7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the ffmpeg-4-4.4.7-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ffmpeg-4 4.4.7-3.1 * ffmpeg-4-libavcodec-devel 4.4.7-3.1 * ffmpeg-4-libavdevice-devel 4.4.7-3.1 * ffmpeg-4-libavfilter-devel 4.4.7-3.1 * ffmpeg-4-libavformat-devel 4.4.7-3.1 * ffmpeg-4-libavresample-devel 4.4.7-3.1 * ffmpeg-4-libavutil-devel 4.4.7-3.1 * ffmpeg-4-libpostproc-devel 4.4.7-3.1 * ffmpeg-4-libswresample-devel 4.4.7-3.1 * ffmpeg-4-libswscale-devel 4.4.7-3.1 * ffmpeg-4-private-devel 4.4.7-3.1 * libavcodec58_134 4.4.7-3.1 * libavdevice58_13 4.4.7-3.1 * libavfilter7_110 4.4.7-3.1 * libavformat58_76 4.4.7-3.1 * libavresample4_0 4.4.7-3.1 * libavutil56_70 4.4.7-3.1 * libpostproc55_9 4.4.7-3.1 * libswresample3_9 4.4.7-3.1 * libswscale5_9 4.4.7-3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-30997.html . # ffmpeg-4-4.4.7-3.1 on GA media Announcement ID: openSUSE-SU-2026:10931-1 Rating: moderate Cross-Re. update, solves, vulnerability, installed, ffmpeg-4-4, media, annou. . LinuxSecurity.com Team
Jun 06, 2026
OpenSUSE
202
security advisorymoderateDoSopenSUSE Tumbleweed ffmpeg Moderate DoS Vulnerability Advisory 2026-10931-1
An update that solves one vulnerability can now be installed.. # ffmpeg-4-4.4.7-3.1 on GA media Announcement ID: openSUSE-SU-2026:10931-1 Rating: moderate Cross-References: * CVE-2026-30997 CVSS scores: * CVE-2026-30997 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-30997 ( SUSE ): 7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the ffmpeg-4-4.4.7-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ffmpeg-4 4.4.7-3.1 * ffmpeg-4-libavcodec-devel 4.4.7-3.1 * ffmpeg-4-libavdevice-devel 4.4.7-3.1 * ffmpeg-4-libavfilter-devel 4.4.7-3.1 * ffmpeg-4-libavformat-devel 4.4.7-3.1 * ffmpeg-4-libavresample-devel 4.4.7-3.1 * ffmpeg-4-libavutil-devel 4.4.7-3.1 * ffmpeg-4-libpostproc-devel 4.4.7-3.1 * ffmpeg-4-libswresample-devel 4.4.7-3.1 * ffmpeg-4-libswscale-devel 4.4.7-3.1 * ffmpeg-4-private-devel 4.4.7-3.1 * libavcodec58_134 4.4.7-3.1 * libavdevice58_13 4.4.7-3.1 * libavfilter7_110 4.4.7-3.1 * libavformat58_76 4.4.7-3.1 * libavresample4_0 4.4.7-3.1 * libavutil56_70 4.4.7-3.1 * libpostproc55_9 4.4.7-3.1 * libswresample3_9 4.4.7-3.1 * libswscale5_9 4.4.7-3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-30997.html . An update for openSUSE Tumbleweed addresses a moderate issue in ffmpeg with advisory ID 2026:10931-1.. opensuse news, ffmpeg update, linux security advisories. . LinuxSecurity.com Team
Jun 06, 2026
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Can sandbox isolation stop malware?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!