Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 39: FEDORA-2024-4d2c8e6f85 Critical: ffmpeg Heap Overflow Fix

fedora
Calendar Grey August 5, 2024
Dist Fedora Esm H88
Patch implemented for CVE-2023-49529 in ffmpeg on Fedora 39 now accessible for improved protection.
Backport fix for CVE-2023-49528

Summary

FFmpeg is a leading multimedia framework, able to decode, encode, transcode,

mux, demux, stream, filter and play pretty much anything that humans and

machines have created. It supports the most obscure ancient formats up to the

cutting edge. No matter if they were designed by some standards committee, the

community or a corporation.

This build of ffmpeg is limited in the number of codecs supported.

Update Information:

Backport fix for CVE-2023-49528

Topics%20covered

Topics Covered

security advisory critical Fedora heap overflow ffmpeg

Change Log

* Wed Jun 19 2024 Dominik Mierzejewski - 6.1.1-4 - Backport fix for CVE-2023-49528

References


[ 1 ] Bug #2274694 - CVE-2023-49528 ffmpeg: Heap Buffer Overflow vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2274694

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4d2c8e6f85' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ffmpeg
Product: Fedora 39
Version: 6.1.1
Release: 4.fc39
URL: https://ffmpeg.org/
Summary: A complete solution to record, convert and stream audio and video

Topics%20covered

Topics Covered

security advisory critical Fedora heap overflow ffmpeg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here