Accepted libav 6:11.12-1~deb8u2 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 19 Dec 2018 14:31:49 +0100
Source: libav
Binary: libav-tools libav-dbg libav-doc libavutil54 libavcodec56 libavdevice55 libavformat56 libavfilter5 libswscale3 libavutil-dev libavcodec-dev libavdevice-dev libavformat-dev libavfilter-dev libswscale-dev libavresample-dev libavresample2 libavcodec-extra-56 libavcodec-extra
Architecture: source all amd64
Version: 6:11.12-1~deb8u2
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Description:
libav-dbg - Debug symbols for Libav related packages
libav-doc - Documentation of the Libav API
libav-tools - Multimedia player, encoder and transcoder
libavcodec-dev - Development files for libavcodec
libavcodec-extra - Libav codec library (additional codecs meta-package)
libavcodec-extra-56 - Libav codec library (additional codecs)
libavcodec56 - Libav codec library
libavdevice-dev - Development files for libavdevice
libavdevice55 - Libav device handling library
libavfilter-dev - Development files for libavfilter
libavfilter5 - Libav video filtering library
libavformat-dev - Development files for libavformat
libavformat56 - Libav file format library
libavresample-dev - Development files for libavresample
libavresample2 - Libav audio resampling library
libavutil-dev - Development files for libavutil
libavutil54 - Libav utility library
libswscale-dev - Development files for libswscale
libswscale3 - Libav video scaling library
Changes:
libav (6:11.12-1~deb8u2) jessie-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS Team.
* CVE-2014-9317: avcodec/pngdec: Check IHDR/IDAT order. Prevent remote
attackers from causing a denial of service (out-of-bounds heap access)
and possibly have other unspecified impact via an IDAT before an IHDR
in a PNG file.
* CVE-2015-6761: avcodec/vp8: Do not use num_coeff_partitions in
thread/buffer setup. The variable is not a constant and can lead to
race conditions.
* CVE-2015-6818: avcodec/pngdec: Only allow one IHDR chunk. Multiple IHDR
chunks are forbidden in PNG. Fixes inconsistency and out of array accesses.
* CVE-2015-6820: avcodec/aacsbr: check that the element type matches before
applying SBR. Fixes out of array access.
* CVE-2015-6821: avcodec/mpegvideo: Clear pointers in ff_mpv_common_init().
This ensures that no stale pointers leak through on any path.
* CVE-2015-6822, CVE-2015-6823, CVE-2015-6824: avcodec/sanm: Reset sizes in
destroy_buffers().
* CVE-2015-6825: avcodec/pthread_frame: clear priv_data, avoid stale pointer
in error case.
* CVE-2015-6826: avcodec/rv34: Clear pointers in
ff_rv34_decode_init_thread_copy(). Avoids leaving stale pointers.
* CVE-2015-8216: avcodec/mjpegdec: Check index in ljpeg_decode_yuv_scan()
before using it. Fixes out of array access.
* CVE-2015-8217: avcodec/hevc_ps: Check chroma_format_idc. Fixes out of
array access.
* CVE-2015-8363: avcodec/jpeg2000dec: Check for duplicate SIZ marker.
* CVE-2015-8364: avcodec/ivi: Check image dimensions. Fixes integer overflow.
* CVE-2015-8661: avcodec/h264_slice: Limit max_contexts when
slice_context_count is initialized. Fixes out of array access.
* CVE-2015-8662: avcodec/jpeg2000dwt: Check ndeclevels before calling
dwt_decode*(). Fixes out of array access.
* CVE-2015-8663: avcodec/utils: Clear dimensions in ff_get_buffer() on
failure. Fixes out of array access.
* CVE-2016-10190: http: make length/offset-related variables unsigned.
Required cherry-picking 3668701f and 362c17e6 from ffmpeg.git.
* CVE-2016-10191: avformat/rtmppkt: Check for packet size mismatches.
Fixes out of array access.
Checksums-Sha1:
dddc80889e64e8e01cee06d145d7913befbf32fb 4023 libav_11.12-1~deb8u2.dsc
61d5dcab5fde349834af193a572b12a5fd6a4d42 4865624 libav_11.12.orig.tar.xz
a46c5abf3539d805b46c577fbdcd9c1bc81e70eb 63348 libav_11.12-1~deb8u2.debian.tar.xz
c68b8cb7a40af736d4fac5f2df14f833d66e7ba8 18439966 libav-doc_11.12-1~deb8u2_all.deb
e66e60e2e3cf007a1187c3fc294d0d838bc274c3 65506 libavcodec-extra_11.12-1~deb8u2_all.deb
d00bcba1eaae7f6243a487f4503bfc0520606359 472802 libav-tools_11.12-1~deb8u2_amd64.deb
8216ee04b089f67ebac48bf6ef57e42a8b76bb49 21598990 libav-dbg_11.12-1~deb8u2_amd64.deb
766a029a861ccf4d517d2309f9f2416039a958b2 130458 libavutil54_11.12-1~deb8u2_amd64.deb
eeec171f3f8a13030d7792711ba32d601b71bce4 3108822 libavcodec56_11.12-1~deb8u2_amd64.deb
97eb8a3c424cbb77664240ff4231f687bc7eac78 90414 libavdevice55_11.12-1~deb8u2_amd64.deb
700dcdbfec70e85ab4857d640b2e60655b427bf1 584780 libavformat56_11.12-1~deb8u2_amd64.deb
e5cb11481c516110116900e5c9e70a630c5d6282 171674 libavfilter5_11.12-1~deb8u2_amd64.deb
aa28082b695da7ab9c63cea1ce94755ba0c8bc02 143968 libswscale3_11.12-1~deb8u2_amd64.deb
7e001b1d5ccd14037cc51b46de1da49a4002d6ff 192632 libavutil-dev_11.12-1~deb8u2_amd64.deb
45c31c2c2ed1681d54e4c67cd8f2a6b3cb0ea9a1 3430460 libavcodec-dev_11.12-1~deb8u2_amd64.deb
c63d129f32fcf80011eb22104b660fdc1900437c 93398 libavdevice-dev_11.12-1~deb8u2_amd64.deb
fb6a47cfc50ff4a652b771d3225dd565b380fae2 690718 libavformat-dev_11.12-1~deb8u2_amd64.deb
54fd47815dd5682fb28b9f63b17cfcd0728174a6 202700 libavfilter-dev_11.12-1~deb8u2_amd64.deb
d9c50052b7cbe3fbb707a15b7454af15c5e18b58 156812 libswscale-dev_11.12-1~deb8u2_amd64.deb
d5cf2ed9540653a603d682f5de1adbbf8d7dfeed 111834 libavresample-dev_11.12-1~deb8u2_amd64.deb
019086f725efd2f25d28d572128cf1836b6b8825 102878 libavresample2_11.12-1~deb8u2_amd64.deb
036097d40310d6955e46fee79cb172a60a660d0f 3111896 libavcodec-extra-56_11.12-1~deb8u2_amd64.deb
Checksums-Sha256:
6406baced868a80815618042cd6b9d5f664642f749b2fa19556869c481713623 4023 libav_11.12-1~deb8u2.dsc
572b029aae64f1239e7dad272e6b9b94d8b16060c6f9a5a7a43da164f8f78abd 4865624 libav_11.12.orig.tar.xz
2db979c410803c8836b46e790e2aba0713d551be479c29c930f933e514c4782a 63348 libav_11.12-1~deb8u2.debian.tar.xz
5cc081809d2a78098568b2f0d47b73a8fcc82e24b7a636352705fdbf92cc16fb 18439966 libav-doc_11.12-1~deb8u2_all.deb
64b295f14389a90c548999d046140d12b46739236db0cb8fb22c6d2c602ad194 65506 libavcodec-extra_11.12-1~deb8u2_all.deb
cc931fe10fc38e8efe8a9e070dbae60cb62d7ffd9866b9ff83fc980fd4e33c95 472802 libav-tools_11.12-1~deb8u2_amd64.deb
a31a5a8fbceda6b089f25d4d6ede1fa32c9070ff63eb548f657dee061115bdc6 21598990 libav-dbg_11.12-1~deb8u2_amd64.deb
2246e94010145390e337075f326054e45cc88b21122e0af78af087a95ca9a9c5 130458 libavutil54_11.12-1~deb8u2_amd64.deb
cbcdaa28d177cfda64f4c4856139c856f4e136bb64eabb6c5196c071e5659e82 3108822 libavcodec56_11.12-1~deb8u2_amd64.deb
a766ea69dc5c4ac764177a7929f3cd1389c53c1d7cc94bdfaab44ba1e7ae5e9e 90414 libavdevice55_11.12-1~deb8u2_amd64.deb
4df152b80156fa1b40119c2742952e5c27647bdf233985fb03583ce08005c570 584780 libavformat56_11.12-1~deb8u2_amd64.deb
de61883a6cca2865292c4f649bbcb7daf4f27a2f3b6d68f7683ecd5c5f7ff2be 171674 libavfilter5_11.12-1~deb8u2_amd64.deb
910e0585c095414859948345203ebf7b1402ff4939896f64b226eaf6574a9543 143968 libswscale3_11.12-1~deb8u2_amd64.deb
49b551bb530713d94ce69d3369e4dfb1ead1283600f350bff01e0c04500d338a 192632 libavutil-dev_11.12-1~deb8u2_amd64.deb
f30dc92b0022dd118314b8d230f38bbe81f015aec495efb437bea554f10f0e68 3430460 libavcodec-dev_11.12-1~deb8u2_amd64.deb
2e663f999adb1cfd2907f3389fe1220f9def86ede4590559836597420224402b 93398 libavdevice-dev_11.12-1~deb8u2_amd64.deb
1e83180fe326b5832507f8e2746194b4960deb925f32b5511e7f9759d0818c48 690718 libavformat-dev_11.12-1~deb8u2_amd64.deb
2e0289525b5c9dc1c7d4eb7edbcfe7b7cdb802be1202ab9d6952479299d89e7a 202700 libavfilter-dev_11.12-1~deb8u2_amd64.deb
7de8481aa4d267eb55cabadf36d2971e679197d5ccb4bcd40b8ce338afb3ffef 156812 libswscale-dev_11.12-1~deb8u2_amd64.deb
05e23be632707a26b623d283a7d858b21e01b668f7b3e1fe97a343257d1ccd29 111834 libavresample-dev_11.12-1~deb8u2_amd64.deb
e534ffff340d28feba49241bbbb175ffd257aabdb8b5d97909a5c9f0a98d715e 102878 libavresample2_11.12-1~deb8u2_amd64.deb
9108aea83cd61f5f5d8868410e1aa7ebfbb730737928e3d6f508555613e8c957 3111896 libavcodec-extra-56_11.12-1~deb8u2_amd64.deb
Files:
68622d64006f55ef43ccb35d0e1a3fb3 4023 libs optional libav_11.12-1~deb8u2.dsc
7b21d9c63f0a14c55fdc9980643a0fd3 4865624 libs optional libav_11.12.orig.tar.xz
00721cbd12ada4b12adc8e274307ac93 63348 libs optional libav_11.12-1~deb8u2.debian.tar.xz
33354aebb2c9a04d1921ff29a8c83269 18439966 doc optional libav-doc_11.12-1~deb8u2_all.deb
d9462e2c544ccaeae8b7a0063df41ece 65506 metapackages extra libavcodec-extra_11.12-1~deb8u2_all.deb
945094feba5e60c003178bd151acd7e9 472802 video optional libav-tools_11.12-1~deb8u2_amd64.deb
4b4a69069840d05c522f3dc676d30a65 21598990 debug extra libav-dbg_11.12-1~deb8u2_amd64.deb
75ef24f3199231895f2151e40e881761 130458 libs optional libavutil54_11.12-1~deb8u2_amd64.deb
3ffa35085204598d70e9ff9a73cc176d 3108822 libs optional libavcodec56_11.12-1~deb8u2_amd64.deb
de06c47e21d4a594d6608ed2041f0814 90414 libs optional libavdevice55_11.12-1~deb8u2_amd64.deb
b5fdb1fea9b83c39ce82125869956796 584780 libs optional libavformat56_11.12-1~deb8u2_amd64.deb
10b73fb09df782d12d917f3c1f1ae6d7 171674 libs optional libavfilter5_11.12-1~deb8u2_amd64.deb
93aed0397e2b6003647582833f599b86 143968 libs optional libswscale3_11.12-1~deb8u2_amd64.deb
86ef8354123ebfac642b9281856aa85f 192632 libdevel optional libavutil-dev_11.12-1~deb8u2_amd64.deb
8b223438d955a735ab0495080341c490 3430460 libdevel optional libavcodec-dev_11.12-1~deb8u2_amd64.deb
57852dc85be08584c36db2213694d77a 93398 libdevel optional libavdevice-dev_11.12-1~deb8u2_amd64.deb
97cd5d10a55434849fcf84b9f34e6283 690718 libdevel optional libavformat-dev_11.12-1~deb8u2_amd64.deb
8ba8247dcb892cd6b8e00aaa131d9fd3 202700 libdevel optional libavfilter-dev_11.12-1~deb8u2_amd64.deb
3092c74d5ddaac92cc92e4426cb698bb 156812 libdevel optional libswscale-dev_11.12-1~deb8u2_amd64.deb
6540e3154fbb4f5c425ae64aaf62d5ac 111834 libdevel optional libavresample-dev_11.12-1~deb8u2_amd64.deb
ee2bc522429b59abe525974184bb153f 102878 libs optional libavresample2_11.12-1~deb8u2_amd64.deb
4469c6c3ae5e9c012bb3170868dd4787 3111896 libs optional libavcodec-extra-56_11.12-1~deb8u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=EpIF
-----END PGP SIGNATURE-----