MGASA-2020-0046

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2020-0046.html

Import Source

https://advisories.mageia.org/MGASA-2020-0046.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2020-0046

Related

Published

2020-01-22T10:37:29Z

Modified

2020-01-22T10:18:48Z

Summary

Updated ffmpeg packages fix security vulnerabilities

Details

Updated ffmpeg packages fix security vulnerabilities:

This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities:

In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer (CVE-2019-17539).

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/ vqavideo.c (CVE-2019-17542).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / ffmpeg

Package

Name: ffmpeg
Purl: pkg:rpm/mageia/ffmpeg?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.5-1.mga7.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:7 / ffmpeg

Package

Name: ffmpeg
Purl: pkg:rpm/mageia/ffmpeg?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.5-1.mga7

Ecosystem specific

{
    "section": "core"
}