CVE-2014-4610: Integer Overflow in FFmpeg LZO implementation

Fri, 27 Jun 2014 10:48:41 -0700 

Hi,
I'd like to inform you that ffmpeg 0.5.10-1 in squeeze is vulnerable to CVE-2014-4610 [1]. 
The fix [2] should be easily backportable.

Best regards,
Andreas


1: http://seclists.org/oss-sec/2014/q2/668
2: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d6af26c55c1ea30f85a7d9edbc373f53be1743ee 


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: https://lists.debian.org/[email protected]

Reply via email to