Register | Log in

libav

Choose email to subscribe with

general

source: libav (updates)
version: 6:11.12-1~deb8u8
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Loïc Minier [DMD] – Jonas Smedegaard [DMD] – Sebastian Ramacher [DMD] – Sam Hocevar (Debian packages) [DMD] – Fabian Greffrath [DMD] – Reinhard Tartler [DMD]
arch: all any
std-ver: 3.9.5
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 6:11.12-1~deb8u1
o-o-sec: 6:11.12-1~deb8u8

versioned links

6:11.12-1~deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6:11.12-1~deb8u8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libav-dbg
libav-doc
libav-tools
libavcodec-dev
libavcodec-extra
libavcodec-extra-56
libavcodec56
libavdevice-dev
libavdevice55
libavfilter-dev
libavfilter5
libavformat-dev (2 bugs: 0, 1, 1, 0)
libavformat56
libavresample-dev
libavresample2
libavutil-dev
libavutil54
libswscale-dev
libswscale3

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

19 security issues in jessie high

There are 19 open security issues in jessie.

8 important issues:

CVE-2019-14371: An issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the file libavformat/mov.c, related to offset and tag.
CVE-2018-11224: An issue was discovered in Libav 12.3. A read access violation in the in_table_init16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
CVE-2018-19130: In Libav 12.3, there is an invalid memory access in vc1_decode_frame in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file.
CVE-2018-19128: In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file.
CVE-2018-18829: There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.
CVE-2019-14443: An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
CVE-2018-19129: In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a segmentation fault (application crash) via a crafted mov file.
CVE-2019-14441: An issue was discovered in Libav 12.3. An access violation allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. This is related to ff_mpa_synth_filter_float in avcodec/mpegaudiodsp_template.c.

11 issues skipped by the security teams:

CVE-2017-18247: The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted media file.
CVE-2017-18245: The mpc8_probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted audio file.
CVE-2017-18246: The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted media file.
CVE-2018-20001: In Libav 12.3, there is a floating point exception in the range_decode_culshift function (called from range_decode_bits) in libavcodec/apedec.c that will lead to remote denial of service via crafted input.
CVE-2016-5115: The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
CVE-2016-9824: Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2017-18243: The unpack_parse_unit function in libavcodec/dirac_parser.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault) via a crafted file.
CVE-2017-18242: The apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file.
CVE-2017-17127: The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVE-2016-9823: libavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2017-18244: The stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted aac file, related to ff_ps_apply.

Please fix them.

Created: 2015-07-16 Last update: 2019-09-01 00:28

news

[2019-08-31] Accepted libav 6:11.12-1~deb8u8 (source all amd64) into oldoldstable (Mike Gabriel)
[2019-05-29] Accepted libav 6:11.12-1~deb8u7 (source all amd64) into oldstable (Mike Gabriel)
[2019-03-30] Accepted libav 6:11.12-1~deb8u6 (source all amd64) into oldstable (Mike Gabriel)
[2019-01-31] Accepted libav 6:11.12-1~deb8u5 (source all amd64) into oldstable (Mike Gabriel)
[2019-01-07] Accepted libav 6:11.12-1~deb8u4 (source all amd64) into oldstable (Markus Koschany)
[2018-12-20] Accepted libav 6:11.12-1~deb8u3 (source all amd64) into oldstable (Mike Gabriel)
[2018-12-20] Accepted libav 6:11.12-1~deb8u2 (source all amd64) into oldstable (Mike Gabriel)
[2018-02-23] Accepted libav 6:11.12-1~deb8u1 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Sebastian Ramacher)
[2017-11-18] Accepted libav 6:11.11-1~deb8u1 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Hugo Lefeuvre)
[2017-10-21] Accepted libav 6:0.8.21-0+deb7u1 (source amd64 all) into oldoldstable (Hugo Lefeuvre)
[2017-04-28] Accepted libav 6:11.9-1~deb8u1 (source all amd64) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2017-01-19] Accepted libav 6:0.8.20-0+deb7u1 (source amd64 all) into oldstable (Hugo Lefeuvre)
[2017-01-12] Accepted libav 6:0.8.19-0+deb7u1 (source amd64 all) into oldstable (Hugo Lefeuvre)
[2016-10-08] Accepted libav 6:11.8-1~deb8u1 (source all amd64) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2016-10-04] Accepted libav 6:0.8.18-0+deb7u1 (source amd64 all) into oldstable (Hugo Lefeuvre)
[2016-06-17] Accepted libav 6:11.7-1~deb8u1 (source all amd64) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2016-06-14] Accepted libav 6:0.8.17-2+deb7u2 (source amd64 all) into oldstable (signed by: Chris Lamb)
[2016-05-10] Accepted libav 6:0.8.17-2+deb7u1 (source amd64 all) into oldstable (signed by: Chris Lamb)
[2016-03-05] Accepted libav 6:0.8.17-2 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Sebastian Ramacher)
[2016-03-05] Accepted libav 6:11.6-1~deb8u1 (source all amd64) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2015-09-06] libav REMOVED from testing (Britney)
[2015-08-29] Removed 6:11.4-2 from unstable
[2015-07-30] Accepted libav 6:11.4-1~deb8u1 (source all) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2015-06-09] libav 6:11.4-2 MIGRATED to testing (Britney)
[2015-06-03] Accepted libav 6:11.4-2 (source all) into unstable (Sebastian Ramacher)
[2015-06-03] libav 6:11.4-1 MIGRATED to testing (Britney)
[2015-05-31] Accepted libav 6:11.4-1 (source amd64 all) into unstable (Reinhard Tartler)
[2015-05-24] Accepted libav 6:11.3-1+deb8u1 (source all) into proposed-updates->stable-new, proposed-updates (Sebastian Ramacher)
[2015-05-12] libav 6:11.3-3 MIGRATED to testing (Britney)
[2015-05-05] Accepted libav 6:11.3-3 (source all) into unstable (Sebastian Ramacher)

1
2

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, clang, cross
popcon
edit tags
security tracker

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing