PT-2014-9134 · FFmpeg+2 · Ffmpeg+2

Publicado 2014-07-26 · Atualizado 2014-07-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Avidemux versions prior to the update with FFmpeg 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4

Description The issue concerns security vulnerabilities in Avidemux, which is built with a bundled set of FFmpeg libraries. The vulnerabilities have been fixed by updating the bundled FFmpeg versions. Additional patches from the FFmpeg 0.10 branch were added to fix specific issues, including a use after free in matroska and integer overflows in lzo.

Recommendations For Avidemux in Mageia 3, update the bundled FFmpeg libraries to version 0.9.4. For Avidemux in Mageia 4, update the bundled FFmpeg libraries to version 1.2.7.

Identificadores relacionados

MGASA-2014-0297

Produtos afetados

Avidemux

Ffmpeg

Mageia

Referências · 4

• http://ffmpeg.org/security.html · Nota
• https://osv.dev/vulnerability/MGASA-2014-0297 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=13643 · Nota
• https://advisories.mageia.org/MGASA-2014-0297.html · Nota de Segurança