Advisories ยป MGASA-2019-0223

Updated mythtv packages fix security issues

Publication date: 18 Aug 2019
Modification date: 17 Feb 2022
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-15822

Description

This update provides and update to mythtv 30, and updates the bundled
ffmpeg to 3.2. It also fixes at least the following issue:

The flv_write_packet function in libavformat/flvenc.c in FFmpeg through
 4.0.2 does not check for an empty audio packet, leading to an assertion
failure (CVE-2018-15822).  

It also fixes mythbackend missing needed environment variables (mga#24104).

For other changes/fixes in this update, see the referenced Release Notes.
                

References

SRPMS

6/core

6/tainted