[SECURITY] [DSA 2855-1] libav security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2855-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 05, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2855-1 (libav - several vulnerabilities)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. The IDs mentioned above are just a portion of the security issues fixed in this update. A full list of the changes is available at...

Debian: Security Advisory (DSA-2855-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0865

The vqadecodechunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write...

CVE-2013-0865

CVE-2013-0865 affects FFmpeg/libav: the vqa_decode_chunk function in libavcodec/vqavideo.c allows an out-of-bounds write through large cbp0 or cbpz chunks in Westwood VQA video files. The issue is fixed in FFmpeg releases >= 1.0.4 and >= 1.1.2. Remediation is to upgrade FFmpeg/libav to a ve...