The package mencoder before version 37857-1 is vulnerable to denial of service. . Arch Linux Security Advisory ASA-201605-12 ========================================= Severity: Medium Date : 2016-05-07 CVE-ID : CVE-2016-4352 Package : mencoder Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package mencoder before version 37857-1 is vulnerable to denial of service. Resolution ========= Upgrade to 37857-1. # pacman -Syu "mencoder> =37857-1" The problem has been fixed upstream in version 37857. Workaround ========= None. Description ========== A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that width*height is
Get the latest Linux and open source security news straight to your inbox.