[Mageia-dev] ffmpeg in mageia1 updates testing (revision 171164)
Anssi Hannula
anssi at mageia.org
Fri Nov 25 00:40:11 CET 2011
On 24.11.2011 17:53, D.Morgan wrote:
> On Thu, Nov 24, 2011 at 1:58 PM, Thomas Backlund <tmb at mageia.org> wrote:
>> Philippe DIDIER skrev 24.11.2011 14:52:
>>>
>>> heavy dilemma ! heavy choice !
>>> - let ffmpeg not updated (with x264 support but with security problem)
>>
>> The proper thing is to identify the needed fixes and backport them.
>>
>>> - update ffmpeg disabling x264 support
>>
>> not an option
>>
>>> - update ffmpeg keeping x264 support but need to rebuild mass of
>>> packages (not alone !!!!) and provide lots of updated rpms to QA !
>>>
>>
>> Absolutely not an option
>
> But how many packages are affected ?
>
BTW, if you look at
http://git.videolan.org/?p=ffmpeg.git;a=shortlog;h=refs/heads/release/0.7
you'll notice the the security issues mentioned here are just a tip of
the iceberg, since there are hundreds of commits fixing buffer overflows
and other similar issues in various codecs in the 0.7 stable branch alone.
--
Anssi Hannula
More information about the Mageia-dev
mailing list