SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-3193

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-3193

Security update for ffmpeg

Type: security

Severity: important

Issued: 2021-09-23

Description:

This update for ffmpeg fixes the following issues:

- CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).

References

CVE: CVE-2021-38171
Bugzilla: 1189724 VUL-0: CVE-2021-38171: ffmpeg: adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value

Packages

ffmpeg-3.4.2-11.11.1