Description
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and
3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename
extensions and demuxer names, which allows attackers to read arbitrary
files via crafted playlist data.
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was needed)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Updated: 2019-09-19 16:05:06 UTC (commit d32ebc32606b9517c6fa7d65a15441e2a57a6de5)