Bug 24098

Summary:	avidemux 2.7.1 with bundled ffmpeg update to 3.3.9
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	lewyssmith, lists.jjorge, sysadmin-bugs
Version:	6	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA6-64-OK
Source RPM:	avidemux	CVE:
Status comment:

Description David Walser 2018-12-30 21:37:07 CET

Note that there are core and tainted builds of this package.

Advisory:
========================

Updated avidemux packages fix security vulnerabilities:

The avidemux package has been updated to version 2.7.1.  Avidemux includes a
bundled copy of the ffmpeg libraries, which have been updated from version
3.3.3 to version 3.3.9, fixing several security issues and other bugs.

References:
http://fixounet.free.fr/avidemux/news.html#2018-06-05
http://ffmpeg.org/security.html
========================

Updated packages in {core,tainted}/updates_testing:
========================
libavidemux-2.7.1-1.mga6
avidemux-devel-2.7.1-1.mga6
avidemux-cli-2.7.1-1.mga6
avidemux-qt-2.7.1-1.mga6
avidemux-plugins-2.7.1-1.mga6
avidemux-cli-plugins-2.7.1-1.mga6
avidemux-qt-plugins-2.7.1-1.mga6

from avidemux-2.7.1-1.mga6.src.rpm

Comment 1 José Jorge 2019-01-07 22:07:08 CET

Tested editing of a part of a movie in copy mode, all ok.

CC: (none) => lists.jjorge
Status: NEW => ASSIGNED
Whiteboard: (none) => MGA6-64-OK

Comment 2 Lewis Smith 2019-01-08 16:26:28 CET

(In reply to José Jorge from comment #1)
> Tested editing of a part of a movie in copy mode, all ok.
Thanks for that. Sending the update on its way.

Keywords: (none) => advisory, validated_update
CC: (none) => lewyssmith, sysadmin-bugs

Comment 3 Mageia Robot 2019-01-08 22:51:48 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2019-0026.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED