oss-sec mailing list archives

Re: Question about (in)security of fdk-aac-free in linux distros


From: Jordan Glover <Golden_Miller83 () protonmail ch>
Date: Fri, 15 Aug 2025 18:45:53 +0000

On Friday, August 15th, 2025 at 6:44 PM, Demi Marie Obenour <demiobenour () gmail com> wrote:

What is your recommendation to distro maintainers? My understanding is
that the full codec is included in the flathub runtimes but am not sure.
--
Sincerely,
Demi Marie Obenour (she/her/hers)

No, flathub runtime shipped the fdk-aac-free version but removed it in current master
branch. I linked to exact commit in first post. AFAIK it's not released yet.

Jordan


Current thread: