SUSE-SU-2019:1299-2

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20191299-2/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1299-2.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:1299-2

Upstream

CVE (2)

Related

CVE (2)

Published

2019-10-14T15:51:04Z

Modified

2026-02-04T02:57:39Z

Summary

Security update for ffmpeg

Details

This update for ffmpeg fixes the following issues:

Security issue fixed:

CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS (bsc#1101889)
CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS (bsc#1101888).

References

Affected packages

SUSE:Linux Enterprise Module for Desktop Applications 15 SP1

ffmpeg

Package

Name: ffmpeg
Purl: pkg:rpm/suse/ffmpeg&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.4.2-4.17.26

Ecosystem specific

{
    "binaries":  [
        {
            "libavcodec57":  "3.4.2-4.17.26",
            "libavutil-devel":  "3.4.2-4.17.26",
            "libavutil55":  "3.4.2-4.17.26",
            "libpostproc-devel":  "3.4.2-4.17.26",
            "libpostproc54":  "3.4.2-4.17.26",
            "libswresample-devel":  "3.4.2-4.17.26",
            "libswresample2":  "3.4.2-4.17.26",
            "libswscale-devel":  "3.4.2-4.17.26",
            "libswscale4":  "3.4.2-4.17.26"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1299-2.json"

SUSE:Linux Enterprise Workstation Extension 15 SP1