Apple Quick Time (EOL)
The Situation
The United States Computer Emergency Readiness Team issued Alert TA16105-A, which recommends Windows users to uninstall Apple QuickTime from their computers :
https://www.us-cert.gov/ncas/alerts/TA16-105A .
Both vulnerabilities indicate that an attacker could leverage this to execute arbitrary code under the context of the QuickTime Player.
Dalet Brio
Dalet Brio has no dependency on QuickTime (which is not installed as part of the default Brio platform installation).
As a consequence uninstalling QuickTime (if installed manually) will not affect the functionality or performance offered by a Dalet Brio product.
Dalet AmberFin
Legacy Dalet Amberfin Versions
32b AmberFin requires QuickTime to handle both input & output .mov files.
64b AmberFin only requires QuickTime for the creation of .mov outputs. QuickTime Essentials should therefore be installed only if users need to support .mov wrapped output formats.
Note that some specialist source file decoders, such as Cineon, are not natively supported by AmberFin and are only available as third-party Apple plugins, which require QT to be installed. QT is also needed for Mov SDI ingest.
Dalet Amberfin 11.9
The Transcoder Mov implementation doesn't now require the installation of QT.
Please contact Dalet support if you require further information on Dalet Brio or Dalet AmberFin platforms.
Dalet Galaxy
Dalet Galaxy will continue to function as normal without the QuickTime library installed and will transcode, ingest and play all of its supported formats (Including mov sc files) .
mov ref creation still relays on Quicktime installation, it is needed only for the following operations (which are not widely used in Galaxy and their support ended):
Xtend for FCP
Diva archive\restore (for non interleaved files only , MXF files are supported without the need for mov ref file creation)
To still support .mov ref files without being exposed to the QuickTime Player vulnerabilities, the QuickTime setup has an option to install "QuickTimeEssentials". This option installs the QuickTime SDK without the QuickTime Player, allowing Dalet Galaxy to continue the support of .mov ref files.
Dalet Enterprie Edition 3.5
There are no plans to remove the use of DaletQuickTime which calls the QuickTime API from Dalet 3.5.
To still support .mov sc and.mov ref files without being exposed to the QuickTime Player vulnerabilities, the QuickTime setup has an option to install "QuickTimeEssentials". This option installs the QuickTime SDK without the QuickTime Player, allowing Dalet Galaxy to continue the support of .mov sc and .mov ref files.
3.5 installed sites who wish to remove the installation of the QT SDK as a whole, should be advised to upgrade to Galaxy.
Comments
0 comments
Please sign in to leave a comment.