summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Debian Multimedia Maintainers [Sat, 21 Oct 2017 13:08:38 +0000 (14:08 +0100)]
configure-disable-ebx-gcc-4.9
Gbp-Pq: Name 02-configure-disable-ebx-gcc-4.9.patch
Hugo Lefeuvre [Sat, 21 Oct 2017 13:08:38 +0000 (14:08 +0100)]
libav (6:11.11-1~deb8u1) jessie-security; urgency=medium
* Non-maintainer upload by the Security Team.
* New upstream release fixing multiple security issues.
- dfa: Disallow odd width/height and add proper bounds check for DDS1 chunks
(CVE-2017-9992)
- pictor: Correctly check frame dimensions (CVE-2017-7862)
- h264_cavlc: check the value of run_before
- dvbsubdec: improve error checking
- dvbsubdec: Fixed segfault when decoding subtitles
- rmdec: don't ignore the return value of av_get_packet()
- caf: add an Opus tag
- yadif: Account for the buffer alignment while processing the frame edges
- mov: log and return early on non-positive stsd entry counts
- arm: Fix SIGBUS on ARM when compiled with binutils 2.29
- smacker: return meaningful error codes on failure
- smacker: fix integer overflow with pts_inc
- mm: Skip unexpected audio packets
- aacsbr: Turnoff in the event of over read.
- smacker: Check that the data size is a multiple of a sample vector
(CVE-2015-8365)
- build: Add an option for passing linker flags to the shared library build
- flv: Validate the packet size
- mjpeg: Report non-3 component rgb lossless as not supported
- vc1dec: raise an error if sprite picture data is missing
- doc: Drop the legacy symlink to README
[dgit import unpatched libav 6:11.11-1~deb8u1]
Hugo Lefeuvre [Sat, 21 Oct 2017 13:08:38 +0000 (14:08 +0100)]
Import libav_11.11.orig.tar.gz
[dgit import orig libav_11.11.orig.tar.gz]
Hugo Lefeuvre [Sat, 21 Oct 2017 13:08:38 +0000 (14:08 +0100)]
Import libav_11.11-1~deb8u1.debian.tar.xz
[dgit import tarball libav 6:11.11-1~deb8u1 libav_11.11-1~deb8u1.debian.tar.xz]