openSUSE-SU-2026:21211-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21211-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21211-1
Upstream
CVE (7)
Related
CVE (7)
Published
2026-07-02T10:09:47Z
Modified
2026-07-03T11:00:08Z
Summary
Security update for ffmpeg-7
Details

This update for ffmpeg-7 fixes the following issues

  • CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).

Changes for ffmpeg-7:

  • Update to version 7.1.4:
  • Codec, format, filter and various other bugfixes.
  • lavc/aarch64: Fix addp overflow in ff_pred16x16_plane_neon_10
  • swscale/output: Fix integer overflow in yuv2ya16_X_c_template()
  • avformat/avformat: clear FFFormatContext packet queue when closing a muxer
References

Affected packages

openSUSE:Leap 16.0 / ffmpeg-7

Package

Name
ffmpeg-7
Purl
pkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.4-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ffmpeg-7":  "7.1.4-160000.1.1",
            "ffmpeg-7-libavcodec-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libavdevice-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libavfilter-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libavformat-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libavutil-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libpostproc-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libswresample-devel":  "7.1.4-160000.1.1",
            "ffmpeg-7-libswscale-devel":  "7.1.4-160000.1.1",
            "libavcodec61":  "7.1.4-160000.1.1",
            "libavdevice61":  "7.1.4-160000.1.1",
            "libavfilter10":  "7.1.4-160000.1.1",
            "libavformat61":  "7.1.4-160000.1.1",
            "libavutil59":  "7.1.4-160000.1.1",
            "libpostproc58":  "7.1.4-160000.1.1",
            "libswresample5":  "7.1.4-160000.1.1",
            "libswscale8":  "7.1.4-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21211-1.json"