libav.git
6 years agoavcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup
Michael Niedermayer [Wed, 30 Sep 2015 09:10:48 +0000 (11:10 +0200)]
avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup

avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup

The variable is not a constant and can lead to race conditions

Fixes: repro.webm (not reproducable with FFmpeg alone)
Found-by: Dale Curtis <dalecurtis@google.com>
Tested-by: Dale Curtis <dalecurtis@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Gbp-Pq: Name CVE-2015-6761.patch

6 years agodisable-configuration-warnings
Debian Multimedia Maintainers [Sat, 30 Mar 2019 20:44:13 +0000 (20:44 +0000)]
disable-configuration-warnings

Gbp-Pq: Name 03-disable-configuration-warnings.patch

6 years agoconfigure-disable-ebx-gcc-4.9
Debian Multimedia Maintainers [Sat, 30 Mar 2019 20:44:13 +0000 (20:44 +0000)]
configure-disable-ebx-gcc-4.9

Gbp-Pq: Name 02-configure-disable-ebx-gcc-4.9.patch

6 years agolibav (6:11.12-1~deb8u6) jessie-security; urgency=medium
Mike Gabriel [Sat, 30 Mar 2019 20:44:13 +0000 (20:44 +0000)]
libav (6:11.12-1~deb8u6) jessie-security; urgency=medium

  * Non-maintainer upload by the LTS team.
  * CVE-2018-1999012: avformat/pva: Check for EOF before retrying in
    read_part_of_packet().
  * CVE-2015-1872: avcodec/mjpegdec: Check number of components for
    JPEG-LS.
  * CVE-2018-6392: avfilter/vf_transpose: Fix out of array access (including
    later regression fix with packed pixel formats).
  * CVE-2017-14058: avformat/hls: Fix DoS due to infinite loop.
  * CVE-2017-1000460: h264dec: handle zero-sized NAL units in
    get_last_needed_nal().

[dgit import unpatched libav 6:11.12-1~deb8u6]

6 years agoImport libav_11.12-1~deb8u6.debian.tar.xz
Mike Gabriel [Sat, 30 Mar 2019 20:44:13 +0000 (20:44 +0000)]
Import libav_11.12-1~deb8u6.debian.tar.xz

[dgit import tarball libav 6:11.12-1~deb8u6 libav_11.12-1~deb8u6.debian.tar.xz]

7 years agoImport libav_11.12.orig.tar.xz
Sebastian Ramacher [Sun, 18 Feb 2018 20:20:56 +0000 (20:20 +0000)]
Import libav_11.12.orig.tar.xz

[dgit import orig libav_11.12.orig.tar.xz]