[Mageia-dev] Freeze push: ffmpeg, mplayer

[David Walser]

David Walser <luigiwalser at ...> writes:
> Funda Wang <fundawang at ...> writes:
> > 
> > Could somebody push ffmpeg 0.10.3 into cauldron? It fixed security
> > problems in the 4xm demuxer, avi demuxer, cook decoder, mm demuxer,
> > mpegvideo decoder, vqavideo decoder (CVE-2012-0947) and xmv demuxer.
> > 
> > Note that core and tainted should be pushed one by one.
> 
> Please also push mplayer, to include the updated ffmpeg.
> 
> I've built both locally and can confirm they build, install, and work.

Ping???

Upstream is conservative with fixes into stable branches, and this has been
tested.  I'd like to get this last security fix in before release.