Date: Tue, 13 Dec 2016 08:48:45 +0000 From: bugzilla-noreply@freebsd.org To: chromium@FreeBSD.org Subject: maintainer-feedback requested: [Bug 215271] www/chromium: maybe use system ffmpeg Message-ID: <bug-215271-28929-kPz1hFtWty@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-215271-28929@https.bugs.freebsd.org/bugzilla/> References: <bug-215271-28929@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
Jan Beich (mail not working) <jbeich@FreeBSD.org> has reassigned Bugzilla Automation <bugzilla@FreeBSD.org>'s request for maintainer-feedback to chromium@FreeBSD.org: Bug 215271: www/chromium: maybe use system ffmpeg https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D215271 --- Description --- Chromium bundles out of date FFmpeg snapshot. While upstream limits the att= ack surface to what's defined in HTML5 video/audio + WebRTC and backports secur= ity fixes, some may fly under the radar e.g., CVE-2016-6164 is still unfixed as of 55.0.2883.87: https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/054db631200c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-215271-28929-kPz1hFtWty>