UbuntuUpdates.org

Package "mencoder"

Name: mencoder

Description:

MPlayer's Movie Encoder
Latest version: 2:1.4+ds1-3ubuntu0.1
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: mplayer
Homepage: https://mplayerhq.hu

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "mencoder"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "mencoder" in Jammy

Repository Area Version
base universe 2:1.4+ds1-3build1
security universe 2:1.4+ds1-3ubuntu0.1

Changelog

Version: 2:1.4+ds1-3ubuntu0.1 2023-02-27 19:06:59 UTC

  mplayer (2:1.4+ds1-3ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-2022-38850_*.patch
    - CVE-2022-38850
    - CVE-2022-38851
    - CVE-2022-38855
    - CVE-2022-38858
    - CVE-2022-38860
    - CVE-2022-38861
    - CVE-2022-38863
    - CVE-2022-38864
    - CVE-2022-38865
    - CVE-2022-38866

 -- Fabian Toepfer <email address hidden> Fri, 24 Feb 2023 18:20:53 +0100
CVE-2022-38850 The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.
CVE-2022-38851 Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This aff
CVE-2022-38855 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects m
CVE-2022-38858 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer
CVE-2022-38860 Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder.
CVE-2022-38861 The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
CVE-2022-38863 Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and
CVE-2022-38864 Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencod
CVE-2022-38865 Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects
CVE-2022-38866 Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38


About   -   Send Feedback to @ubuntu_updates