libav.git
6 years agoavcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup
Michael Niedermayer [Wed, 30 Sep 2015 09:10:48 +0000 (11:10 +0200)]
avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup

avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup

The variable is not a constant and can lead to race conditions

Fixes: repro.webm (not reproducable with FFmpeg alone)
Found-by: Dale Curtis <dalecurtis@google.com>
Tested-by: Dale Curtis <dalecurtis@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Gbp-Pq: Name CVE-2015-6761.patch

6 years agodisable-configuration-warnings
Debian Multimedia Maintainers [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
disable-configuration-warnings

Gbp-Pq: Name 03-disable-configuration-warnings.patch

6 years agoconfigure-disable-ebx-gcc-4.9
Debian Multimedia Maintainers [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
configure-disable-ebx-gcc-4.9

Gbp-Pq: Name 02-configure-disable-ebx-gcc-4.9.patch

6 years agolibav (6:11.12-1~deb8u8) jessie-security; urgency=medium
Mike Gabriel [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
libav (6:11.12-1~deb8u8) jessie-security; urgency=medium

  * CVE-2019-14442: avformat/mpc8: fix hang with fuzzed file.
  * CVE-2018-5766: lavc/avpacket: Fix undefined behaviour, do not pass a null
    pointer to memcpy().
  * CVE-2019-14372: wvdec: check for eof in wv_read_block_header().
  * CVE-2017-9987: avcodec/mpegvideo_motion: Fix off by 1 error in MV bounds
    checking.
  * CVE-2018-11102:
    - mov_probe: fix integer overflows.
    - mov.c: Check for stsd + m1s tag indicating MOV-wrapped MPEG-PS, and force
      continued probing if found.

[dgit import unpatched libav 6:11.12-1~deb8u8]

6 years agoImport libav_11.12-1~deb8u8.debian.tar.xz
Mike Gabriel [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
Import libav_11.12-1~deb8u8.debian.tar.xz

[dgit import tarball libav 6:11.12-1~deb8u8 libav_11.12-1~deb8u8.debian.tar.xz]

7 years agoImport libav_11.12.orig.tar.xz
Sebastian Ramacher [Sun, 18 Feb 2018 20:20:56 +0000 (20:20 +0000)]
Import libav_11.12.orig.tar.xz

[dgit import orig libav_11.12.orig.tar.xz]