Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: 2024:810afc5c2e Moderate: Ffmpeg Heap Buffer Overflow Fix

fedora
Calendar Grey July 21, 2024
Dist Fedora Esm H88
Tackling CVE-2023-49528 is essential for Fedora users to ensure strong system security and minimize vulnerabilities while improving Mesa compatibility with ffmpeg
Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA-API

Summary

FFmpeg is a leading multimedia framework, able to decode, encode, transcode,

mux, demux, stream, filter and play pretty much anything that humans and

machines have created. It supports the most obscure ancient formats up to the

cutting edge. No matter if they were designed by some standards committee, the

community or a corporation.

This build of ffmpeg is limited in the number of codecs supported.

Update Information:

Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA-API

Topics%20covered

Topics Covered

security advisory software update Fedora heap overflow ffmpeg video encoding

Change Log

* Sat Jul 20 2024 Neal Gompa - 6.1.1-19 - Backport fixes for Mesa 24.0.6+ / 21.1.4+ changes for VA-API * Wed Jul 17 2024 Fedora Release Engineering - 6.1.1-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Tue Jul 16 2024 Nicolas Chauvet - 6.1.1-17 - Rebuilt for libplacebo/vmaf * Wed Jun 19 2024 Dominik Mierzejewski - 6.1.1-16 - Backport fix for CVE-2023-49528 * Thu Jun 13 2024 Sandro Mani - 6.1.1-15 - Rebuild for tesseract-5.4.1

References


[ 1 ] Bug #2274694 - CVE-2023-49528 ffmpeg: Heap Buffer Overflow vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2274694

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-810afc5c2e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: ffmpeg
Product: Fedora 40
Version: 6.1.1
Release: 19.fc40
URL: https://ffmpeg.org/
Summary: A complete solution to record, convert and stream audio and video

Topics%20covered

Topics Covered

security advisory software update Fedora heap overflow ffmpeg video encoding

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here