3 ms·
It’s OSS so somebody who cares will fix it, and if nobody cares then it doesn’t really matter. This also informs users that it’s not safe to use ffmpeg or soft
by walletdrainer 11mo ago
It’s OSS so somebody who cares will fix it, and if nobody cares then it doesn’t really matter.
This also informs users that it’s not safe to use ffmpeg or software derived from it to open untrusted files, and perhaps most importantly releasing this tells the distro package maintainers to disable the particular codec when packaging.
- Wowfunhappy 11mo agoRight, I just don’t see why they need to publish the actual exploit.
- walletdrainer 11mo agoThey have not, neither have they indicated that they’re planning to do so.
- Wowfunhappy 11mo agoI thought that was how the 90 day disclosure timeline worked?
- walletdrainer 11mo agoAfter 90 days they just disclose the vulnerability. From there, developing an exploit is still a fairly complex task.