summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Mike Gabriel [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
libav (6:11.12-1~deb8u8) jessie-security; urgency=medium
* CVE-2019-14442: avformat/mpc8: fix hang with fuzzed file.
* CVE-2018-5766: lavc/avpacket: Fix undefined behaviour, do not pass a null
pointer to memcpy().
* CVE-2019-14372: wvdec: check for eof in wv_read_block_header().
* CVE-2017-9987: avcodec/mpegvideo_motion: Fix off by 1 error in MV bounds
checking.
* CVE-2018-11102:
- mov_probe: fix integer overflows.
- mov.c: Check for stsd + m1s tag indicating MOV-wrapped MPEG-PS, and force
continued probing if found.
[dgit import unpatched libav 6:11.12-1~deb8u8]
Mike Gabriel [Sat, 31 Aug 2019 15:36:55 +0000 (16:36 +0100)]
Import libav_11.12-1~deb8u8.debian.tar.xz
[dgit import tarball libav 6:11.12-1~deb8u8 libav_11.12-1~deb8u8.debian.tar.xz]
Sebastian Ramacher [Sun, 18 Feb 2018 20:20:56 +0000 (20:20 +0000)]
Import libav_11.12.orig.tar.xz
[dgit import orig libav_11.12.orig.tar.xz]