Security update for ffmpeg (moderate)

An update that fixes 12 vulnerabilities is now available.

Description:

This update for ffmpeg fixes the following issues:

• CVE-2021-3566: Fixed information leak (bsc#1189166).
• CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert()
  (bsc#1190734)
• CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt()
  (bsc#1190733)
• CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel()
  (bsc#1190735)
• CVE-2020-22037: Fixed denial of service vulnerability caused by memory
  leak in avcodec_alloc_context3() (bsc#1186756)
• CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
• CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
• CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input()
  (bsc#1190718)
• CVE-2020-20895: Fixed a buffer overflow vulnerability in function
  filter_vertically_##name (bsc#1190722)
• CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
• CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props()
  (bsc#1190726)
• CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit
  long_term_filter() (bsc#1190729)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-3521=1