MGASA-2020-0046
- Source
- https://advisories.mageia.org/MGASA-2020-0046.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0046.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0046
- Related
- Published
- 2020-01-22T10:37:29Z
- Modified
- 2020-01-22T10:18:48Z
- Summary
- Updated ffmpeg packages fix security vulnerabilities
- Details
-
Updated ffmpeg packages fix security vulnerabilities:
This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities:
In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer (CVE-2019-17539).
FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/ vqavideo.c (CVE-2019-17542).
- References
- Credits
-
-
- Mageia - COORDINATOR
-