Alpine/ffmpeg: high 7.5
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attack
Action: Upgrade ffmpeg to 3.1.9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0 | 3.1.9-r0 | - |
Fixed versions
| 3.1.9-r0 |
Sources
published · modified · JSON