{"id":"MGASA-2014-0297","aliases":[],"status":"published","title":"Updated avidemux packages fix security issues in the bundles ffmpeg","description":"Updated avidemux packages fix security vulnerabilities:\n\nAvidemux built with a bundled set of FFmpeg libraries.  The bundled FFmpeg\nversions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to\nfix several security issues and other bugs fixed upstream in FFmpeg.\n\nFor the Mageia 3 update, additional patches from the FFmpeg 0.10 branch were\nadded to fix a use after free in matroska and integer overflows in lzo.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-07-26T12:40:44Z","modified":"2026-04-16T04:29:00Z","fixes":[{"ecosystem":"Mageia:3","package":"avidemux","fixed_in":["2.5.6-6.2.mga3","2.5.6-6.2.mga3.tainted"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"avidemux","fixed_in":["2.6.6-2.1.mga4","2.6.6-2.1.mga4.tainted"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-6.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-6.2.mga3.tainted"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"avidemux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-2.1.mga4.tainted"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0297.html","tags":["advisory"]},{"url":"http://ffmpeg.org/security.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13643","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2014-0297","title":"Updated avidemux packages fix security issues in the bundles ffmpeg","description":"Updated avidemux packages fix security vulnerabilities:\n\nAvidemux built with a bundled set of FFmpeg libraries.  The bundled FFmpeg\nversions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to\nfix several security issues and other bugs fixed upstream in FFmpeg.\n\nFor the Mageia 3 update, additional patches from the FFmpeg 0.10 branch were\nadded to fix a use after free in matroska and integer overflows in lzo.\n","status":"published","published":"2014-07-26T12:40:44Z","modified":"2026-04-16T04:29:00.941664Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}