The changes from the fixing commit [0] only apply if the changes from commit ee664f41dbd [1] are also present. The changes from the latter were only introduced in version 6.1 of FFmpeg. openSUSE:Factory/ffmpeg-6 is not affected because it already contains the changes that fix the vulnerability. [0] https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/08bd2cbfeb34717d60ec62bcbaeb7996206df906 [1] https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/ee664f41dbd94d896c5b45fa0d916a0b82f22b34