Lucene search

K
mageiaGentoo FoundationMGASA-2020-0046
HistoryJan 22, 2020 - 1:37 p.m.

Updated ffmpeg packages fix security vulnerabilities

2020-01-2213:37:29
Gentoo Foundation
advisories.mageia.org
8

0.02 Low

EPSS

Percentile

88.9%

Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities: In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer (CVE-2019-17539). FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/ vqavideo.c (CVE-2019-17542).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchffmpeg< 4.1.5-1ffmpeg-4.1.5-1.mga7
Mageia7noarchffmpeg< 4.1.5-1ffmpeg-4.1.5-1.mga7.tainted