OESA-2025-1369

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1369
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1369.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1369
Upstream
Published
2025-04-03T12:54:16Z
Modified
2025-08-12T05:47:14.978116Z
Summary
libtheora security update
Details

Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats.

Security Fix(es):

ochufftree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.(CVE-2024-56431)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP4

libtheora

Package

Name
libtheora
Purl
pkg:rpm/openEuler/libtheora&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.1-25.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "libtheora-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-debugsource-1.1.1-25.oe2003sp4.x86_64.rpm",
        "libtheora-devel-1.1.1-25.oe2003sp4.x86_64.rpm",
        "theora-tools-1.1.1-25.oe2003sp4.x86_64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-25.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "libtheora-1.1.1-25.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-debugsource-1.1.1-25.oe2003sp4.aarch64.rpm",
        "libtheora-devel-1.1.1-25.oe2003sp4.aarch64.rpm",
        "theora-tools-1.1.1-25.oe2003sp4.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP3

libtheora

Package

Name
libtheora
Purl
pkg:rpm/openEuler/libtheora&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.1-26.oe2203sp3

Ecosystem specific 

{
    "x86_64": [
        "libtheora-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp3.x86_64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp3.x86_64.rpm",
        "theora-tools-1.1.1-26.oe2203sp3.x86_64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-26.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "libtheora-1.1.1-26.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp3.aarch64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp3.aarch64.rpm",
        "theora-tools-1.1.1-26.oe2203sp3.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP4

libtheora

Package

Name
libtheora
Purl
pkg:rpm/openEuler/libtheora&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.1-26.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "libtheora-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp4.x86_64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp4.x86_64.rpm",
        "theora-tools-1.1.1-26.oe2203sp4.x86_64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-26.oe2203sp4.noarch.rpm"
    ],
    "src": [
        "libtheora-1.1.1-26.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-debugsource-1.1.1-26.oe2203sp4.aarch64.rpm",
        "libtheora-devel-1.1.1-26.oe2203sp4.aarch64.rpm",
        "theora-tools-1.1.1-26.oe2203sp4.aarch64.rpm"
    ]
}

openEuler:24.03-LTS

libtheora

Package

Name
libtheora
Purl
pkg:rpm/openEuler/libtheora&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.1-28.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "libtheora-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403.x86_64.rpm",
        "libtheora-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.x86_64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-28.oe2403.noarch.rpm",
        "libtheora-help-1.1.1-28.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "libtheora-1.1.1-28.oe2403.src.rpm",
        "libtheora-1.1.1-28.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403.aarch64.rpm",
        "libtheora-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.aarch64.rpm"
    ]
}

openEuler:24.03-LTS-SP1

libtheora

Package

Name
libtheora
Purl
pkg:rpm/openEuler/libtheora&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.1-28.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "libtheora-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.x86_64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.x86_64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.x86_64.rpm"
    ],
    "noarch": [
        "libtheora-help-1.1.1-28.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "libtheora-1.1.1-28.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "libtheora-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debuginfo-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-debugsource-1.1.1-28.oe2403sp1.aarch64.rpm",
        "libtheora-devel-1.1.1-28.oe2403sp1.aarch64.rpm",
        "theora-tools-1.1.1-28.oe2403sp1.aarch64.rpm"
    ]
}