"libavcodec may be vulnerable..." message in Firefox
Since last week, I'm receiving the following message for almost every page that I open in Firefox:
libavcodev may be vulnerable or is not supported, and should be updated for play video
Apparently, this is just a warning, 'cause I can play videos normally.
I tried
sudo apt-get install libavcodec
but this package does not exists.
I also did apt-get update
and apt-get upgrade
, but the message persists.
Finally, when I use apt-get autoremove
, it does not return any package.
I googled for the message, but not found anything similar.
What should I do to eliminate this message? Should I stay alert for anything?
Some info:
- Ubuntu 14.04
- Firefox Developer Edition 51.0a2
Solution 1:
There are a security issue described here:
Description
The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
the libav
can be installed through:
sudo apt-get install libav-tools
The libav
's version used by ubuntu 14.04 is 9.x
and can be upgraded to 11.x
as follow :
sudo add-apt-repository ppa:heyarje/libav-11
sudo apt-get update
sudo apt-get install libav-tools
Run:
sudo apt-get update && sudo apt-get upgrade
sudo apt-get dist-upgrade
to upgrade packages.
Solution 2:
In case you can not upgrade your libav
, you can force firefox to use the old version by changing this setting (-> about:config) :
media.libavcodec.allow-obsolete
The defaults setting is false , but you can change it to true .