FFMPEG Security Issue – Synology

admin

I see beta build 4.10.0.16-beta got a security update for FFMPEG under entry of 

  • Update ffmpeg build to disable magicyuv decoder

The vulnerability is called “PixelSmash” (tracked as CVE-2026-8461), a critical heap out-of-bounds write in FFmpeg’s MagicYUV decoder.

Are there plans to release just a security update for 4.9.5 customers? I don’t run beta on production server and the beta going GA is probably some way off still.

Thanks

Read more here: Source link