<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for ffmpeg</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2016:2463-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2016-10-06T09:49:29Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2016-10-06T09:49:29Z</InitialReleaseDate>
    <CurrentReleaseDate>2016-10-06T09:49:29Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for ffmpeg</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
ffmpeg was updated to 2.8.8 to fix the following issues, both bugs and security issues:

* avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
* avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
* avformat/oggparseopus: Check that granule pos is within the supported range
* avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
* ffmpeg: Check that r_frame_rate is set before attempting to use it
* avformat/utils: Do not compute the bitrate from duration == 0
* avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
* avformat/avidec: Detect index with too short entries
* avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
* avformat/allformats: Making av_register_all() thread-safe.
* avcodec/vp9_parser: Check the input frame sizes for being consistent
* avformat/oggdec: Fix integer overflow with invalid pts
* avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
* avcodec/diracdec: Check numx/y
* avformat/avidec: Fix infinite loop in avi_read_nikon()
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-updates/2016-10/msg00019.html</URL>
      <Description>E-Mail link for openSUSE-SU-2016:2463-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE Leap 42.1">
      <Branch Type="Product Name" Name="openSUSE Leap 42.1">
        <FullProductName ProductID="openSUSE Leap 42.1">openSUSE Leap 42.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ffmpeg-2.8.8-19.1">
      <FullProductName ProductID="ffmpeg-2.8.8-19.1">ffmpeg-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ffmpeg-devel-2.8.8-19.1">
      <FullProductName ProductID="ffmpeg-devel-2.8.8-19.1">ffmpeg-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec-devel-2.8.8-19.1">
      <FullProductName ProductID="libavcodec-devel-2.8.8-19.1">libavcodec-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec56-2.8.8-19.1">
      <FullProductName ProductID="libavcodec56-2.8.8-19.1">libavcodec56-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavcodec56-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavcodec56-32bit-2.8.8-19.1">libavcodec56-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice-devel-2.8.8-19.1">
      <FullProductName ProductID="libavdevice-devel-2.8.8-19.1">libavdevice-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice56-2.8.8-19.1">
      <FullProductName ProductID="libavdevice56-2.8.8-19.1">libavdevice56-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavdevice56-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavdevice56-32bit-2.8.8-19.1">libavdevice56-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter-devel-2.8.8-19.1">
      <FullProductName ProductID="libavfilter-devel-2.8.8-19.1">libavfilter-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter5-2.8.8-19.1">
      <FullProductName ProductID="libavfilter5-2.8.8-19.1">libavfilter5-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavfilter5-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavfilter5-32bit-2.8.8-19.1">libavfilter5-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat-devel-2.8.8-19.1">
      <FullProductName ProductID="libavformat-devel-2.8.8-19.1">libavformat-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat56-2.8.8-19.1">
      <FullProductName ProductID="libavformat56-2.8.8-19.1">libavformat56-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavformat56-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavformat56-32bit-2.8.8-19.1">libavformat56-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample-devel-2.8.8-19.1">
      <FullProductName ProductID="libavresample-devel-2.8.8-19.1">libavresample-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample2-2.8.8-19.1">
      <FullProductName ProductID="libavresample2-2.8.8-19.1">libavresample2-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavresample2-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavresample2-32bit-2.8.8-19.1">libavresample2-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil-devel-2.8.8-19.1">
      <FullProductName ProductID="libavutil-devel-2.8.8-19.1">libavutil-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil54-2.8.8-19.1">
      <FullProductName ProductID="libavutil54-2.8.8-19.1">libavutil54-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libavutil54-32bit-2.8.8-19.1">
      <FullProductName ProductID="libavutil54-32bit-2.8.8-19.1">libavutil54-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc-devel-2.8.8-19.1">
      <FullProductName ProductID="libpostproc-devel-2.8.8-19.1">libpostproc-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc53-2.8.8-19.1">
      <FullProductName ProductID="libpostproc53-2.8.8-19.1">libpostproc53-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libpostproc53-32bit-2.8.8-19.1">
      <FullProductName ProductID="libpostproc53-32bit-2.8.8-19.1">libpostproc53-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample-devel-2.8.8-19.1">
      <FullProductName ProductID="libswresample-devel-2.8.8-19.1">libswresample-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample1-2.8.8-19.1">
      <FullProductName ProductID="libswresample1-2.8.8-19.1">libswresample1-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswresample1-32bit-2.8.8-19.1">
      <FullProductName ProductID="libswresample1-32bit-2.8.8-19.1">libswresample1-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale-devel-2.8.8-19.1">
      <FullProductName ProductID="libswscale-devel-2.8.8-19.1">libswscale-devel-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale3-2.8.8-19.1">
      <FullProductName ProductID="libswscale3-2.8.8-19.1">libswscale3-2.8.8-19.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libswscale3-32bit-2.8.8-19.1">
      <FullProductName ProductID="libswscale3-32bit-2.8.8-19.1">libswscale3-32bit-2.8.8-19.1</FullProductName>
    </Branch>
    <Relationship ProductReference="ffmpeg-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ffmpeg-2.8.8-19.1">ffmpeg-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ffmpeg-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ffmpeg-devel-2.8.8-19.1">ffmpeg-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec-devel-2.8.8-19.1">libavcodec-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec56-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec56-2.8.8-19.1">libavcodec56-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavcodec56-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavcodec56-32bit-2.8.8-19.1">libavcodec56-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice-devel-2.8.8-19.1">libavdevice-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice56-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice56-2.8.8-19.1">libavdevice56-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavdevice56-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavdevice56-32bit-2.8.8-19.1">libavdevice56-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter-devel-2.8.8-19.1">libavfilter-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter5-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter5-2.8.8-19.1">libavfilter5-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavfilter5-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavfilter5-32bit-2.8.8-19.1">libavfilter5-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat-devel-2.8.8-19.1">libavformat-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat56-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat56-2.8.8-19.1">libavformat56-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavformat56-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavformat56-32bit-2.8.8-19.1">libavformat56-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample-devel-2.8.8-19.1">libavresample-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample2-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample2-2.8.8-19.1">libavresample2-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavresample2-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavresample2-32bit-2.8.8-19.1">libavresample2-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil-devel-2.8.8-19.1">libavutil-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil54-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil54-2.8.8-19.1">libavutil54-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libavutil54-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libavutil54-32bit-2.8.8-19.1">libavutil54-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc-devel-2.8.8-19.1">libpostproc-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc53-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc53-2.8.8-19.1">libpostproc53-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libpostproc53-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libpostproc53-32bit-2.8.8-19.1">libpostproc53-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample-devel-2.8.8-19.1">libswresample-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample1-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample1-2.8.8-19.1">libswresample1-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswresample1-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswresample1-32bit-2.8.8-19.1">libswresample1-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale-devel-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale-devel-2.8.8-19.1">libswscale-devel-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale3-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale3-2.8.8-19.1">libswscale3-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libswscale3-32bit-2.8.8-19.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libswscale3-32bit-2.8.8-19.1">libswscale3-32bit-2.8.8-19.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
  </ProductTree>
</cvrfdoc>
