FFMPEG Security Issue

[unisoft 363]

I see beta build 4.10.0.16-beta got a security update for FFMPEG under entry of 

• Update ffmpeg build to disable magicyuv decoder

The vulnerability is called “PixelSmash” (tracked as CVE-2026-8461), a critical heap out-of-bounds write in FFmpeg’s MagicYUV decoder.

Are there plans to release just a security update for 4.9.5 customers? I don't run beta on production server and the beta going GA is probably some way off still.

Thanks

[GrimReaper 5067]

19 minutes ago, unisoft said:

The vulnerability is called “PixelSmash” (tracked as CVE-2026-8461), a critical heap out-of-bounds write in FFmpeg’s MagicYUV decoder.

You can follow related discussion here:

 

19 minutes ago, unisoft said:

Are there plans to release just a security update for 4.9.5 customers?

Doesn't appear so, more likely that the beta will be pushed as stable soon(ish). 

Edited June 28 by GrimReaper