[BUG] FFmpeg 8.1 is vulernable to CVE-2026-8461

[SergeantPanda]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

The current version of FFmpeg 8.1 is vulnerable to CVE-2026-8461 and needs to be updated to 8.1.2 to resolve.

Expected Behavior

No response

Steps To Reproduce

If you run the following command: ffmpeg -decoders 2>/dev/null | grep magicyuv and get a response similar to this: VFS..D magicyuv MagicYUV video, based on this: https://jfrog.com/blog/pixelsmash-critical-ffmpeg-vulnerability-turns-media-files-into-weapons/ then FFmpeg is vulnerable.

Environment

NA

Docker creation

NA

Container logs

ffmpeg -decoders 2>/dev/null | grep magicyuv
 VFS..D magicyuv             MagicYUV video

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[SergeantPanda]

Thank you for the fast turn-around. Any idea how long until the packages get built?

Edit: Nevermind, I think I can see it is actively building. I had looked under actions and didn't see it but I can now see that you use an external builder.