MGASA-2023-0043 - Updated ffmpeg packages fix security vulnerability

Publication date: 14 Feb 2023
URL: https://advisories.mageia.org/MGASA-2023-0043.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in
decode_main_header() function of libavformat/nutdec.c file. The flaw
occurs because the function lacks check of the return value of
avformat_new_stream() and triggers the null pointer dereference error,
causing an application to crash. (CVE-2022-3341)

References:
- https://bugs.mageia.org/show_bug.cgi?id=31460
- https://nvd.nist.gov/vuln/detail/CVE-2022-3341
- https://security-tracker.debian.org/tracker/CVE-2022-3341
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3341

SRPMS:
- 8/core/ffmpeg-4.3.5-1.2.mga8
- 8/tainted/ffmpeg-4.3.5-1.2.mga8.tainted