Advisories » MGASA-2014-0297

Updated avidemux packages fix security issues in the bundles ffmpeg

Publication date: 26 Jul 2014
Modification date: 26 Jul 2014
Type: security
Affected Mageia releases : 3 , 4

Description

Updated avidemux packages fix security vulnerabilities:

Avidemux built with a bundled set of FFmpeg libraries.  The bundled FFmpeg
versions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to
fix several security issues and other bugs fixed upstream in FFmpeg.

For the Mageia 3 update, additional patches from the FFmpeg 0.10 branch were
added to fix a use after free in matroska and integer overflows in lzo.
                

References

• http://ffmpeg.org/security.html
• https://bugs.mageia.org/show_bug.cgi?id=13643

SRPMS

3/core

• avidemux-2.5.6-6.2.mga3

3/tainted

• avidemux-2.5.6-6.2.mga3.tainted

4/core

• avidemux-2.6.6-2.1.mga4

4/tainted

• avidemux-2.6.6-2.1.mga4.tainted