Re: CVE-2014-4610: Integer Overflow in FFmpeg LZO implementation
On Thu, Jul 10, 2014 at 12:10:50AM +0200, Andreas Cadhalpun wrote:
>
> As this seems to be a rather important security bug, I think a backport
> would be useful in this case.
Raphael wanted to update ffmpeg in squeeze. I'm adding him to CC,
so that he can fold in the patch.
> I'm afraid I don't understand the part about
> 'too many checks missing'.
It means that the 0.5.x branch of ffmpeg is missing many other security
fixes already.
Cheers,
Moritz
Reply to: