OESA-2025-1369

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1369

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-1369.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2025-1369

Upstream

CVE-2024-56431

Published

2025-04-03T12:54:16Z

Modified

2025-08-12T05:47:14.978116Z

Summary

libtheora security update

Details

Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats.

Security Fix(es):

ochufftree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.(CVE-2024-56431)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:20.03-LTS-SP4 / libtheora

Package

Name: libtheora
Purl: pkg:rpm/openEuler/libtheora&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-25.oe2003sp4

Ecosystem specific

{
    "x86_64": [
        "libtheora-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-debugsource-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-devel-1.1.1-25.oe2003sp4.x86_64.rpm",
        "theora-tools-1.1.1-25.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "libtheora-1.1.1-25.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-debugsource-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-devel-1.1.1-25.oe2003sp4.aarch64.rpm",
        "theora-tools-1.1.1-25.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-25.oe2003sp4.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / libtheora

Package

Name: libtheora
Purl: pkg:rpm/openEuler/libtheora&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-26.oe2203sp3

Ecosystem specific

{
    "x86_64": [
        "libtheora-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp3.x86_64.rpm",
        "theora-tools-1.1.1-26.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "libtheora-1.1.1-26.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp3.aarch64.rpm",
        "theora-tools-1.1.1-26.oe2203sp3.aarch64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-26.oe2203sp3.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / libtheora

Package

Name: libtheora
Purl: pkg:rpm/openEuler/libtheora&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-26.oe2203sp4

Ecosystem specific

{
    "x86_64": [
        "libtheora-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp4.x86_64.rpm",
        "theora-tools-1.1.1-26.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "libtheora-1.1.1-26.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp4.aarch64.rpm",
        "theora-tools-1.1.1-26.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-26.oe2203sp4.noarch.rpm"
    ]
}

openEuler:24.03-LTS / libtheora

Package

Name: libtheora
Purl: pkg:rpm/openEuler/libtheora&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-28.oe2403sp1

Ecosystem specific

{
    "x86_64": [
        "libtheora-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "libtheora-1.1.1-28.oe2403.src.rpm",
        "libtheora-1.1.1-28.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-28.oe2403.noarch.rpm",
        "libtheora-help-1.1.1-28.oe2403sp1.noarch.rpm"
    ]
}

openEuler:24.03-LTS-SP1 / libtheora

Package

Name: libtheora
Purl: pkg:rpm/openEuler/libtheora&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-28.oe2403sp1

Ecosystem specific

{
    "x86_64": [
        "libtheora-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "libtheora-1.1.1-28.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-28.oe2403sp1.noarch.rpm"
    ]
}