ALT-PU-2026-20100: package ffmpeg update to version 4.4.8-alt2
Источник
errata.altlinux.org
Дата публикации
30.10.2026
Дата обновления
30.10.2026
Устраненные уязвимости
28
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades ffmpeg to version 4.4.8-alt2.
Устраненные уязвимости28
Связанные уязвимости
CVSS3: 9.8
altlinux
около 1 месяца назад
ALT-PU-2026-15796: package `ffmpeg` update to version 7.1.5-alt3
CVSS3: 6.5
ubuntu
5 месяцев назад
A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash).