Description
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and
3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename
extensions and demuxer names, which allows attackers to read arbitrary
files via crafted playlist data.
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was needed)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 19.10 (Eoan Ermine): | DNE
|
Updated: 2020-03-18 22:50:53 UTC (commit 2ea7df7bd1e69e1e489978d2724a936eb3faa1b8)