libav 4:0.8.17-0ubuntu0.12.04.2 source package in Ubuntu
Changelog
libav (4:0.8.17-0ubuntu0.12.04.2) precise-security; urgency=medium
* SECURITY UPDATE: invalid memory access via crafted MJPEG data
- debian/patches/CVE-2014-8541.patch: check for pixel format changes in
libavcodec/mjpegdec.c.
- CVE-2014-8541
* SECURITY UPDATE: out of array access in ff_mjpeg_decode_sof
- debian/patches/CVE-2015-1872.patch: check number of components in
libavcodec/mjpegdec.c.
- CVE-2015-1872
* SECURITY UPDATE: out of bounds array access in msrle_decode_pal4
- debian/patches/CVE-2015-3395.patch: determine frame size in
libavcodec/msrledec.c.
- CVE-2015-3395
* SECURITY UPDATE: size issue in ff_h263_decode_picture_header
- debian/patches/CVE-2015-5479.patch: check both dimensions in
libavcodec/ituh263dec.c.
- CVE-2015-5479
* SECURITY UPDATE: out of bounds array access in decode_ihdr_chunk
- debian/patches/CVE-2015-6818.patch: only allow one IHDR chunk in
libavcodec/pngdec.c.
- CVE-2015-6818
* SECURITY UPDATE: out of bounds array access in ff_sbr_apply
- debian/patches/CVE-2015-6820.patch: check that the element type
matches in libavcodec/aacsbr.c, libavcodec/sbr.h.
- CVE-2015-6820
* SECURITY UPDATE: uninitialized memory access in sws_init_context
- debian/patches/CVE-2015-6824.patch: clear buffers in
libswscale/utils.c
- CVE-2015-6824
* SECURITY UPDATE: invalid pointer use in ff_rv34_decode_init_thread_copy
- debian/patches/CVE-2015-6826.patch: clear pointers in
libavcodec/rv34.c.
- CVE-2015-6826
* SECURITY UPDATE: integer overflow in ff_ivi_init_planes
- debian/patches/CVE-2015-8364.patch: check image dimensions in
libavcodec/ivi_common.c.
- CVE-2015-8364
* SECURITY UPDATE: out of bounds array access in smka_decode_frame
- debian/patches/CVE-2015-8365.patch: validate data size in
libavcodec/smacker.c.
- CVE-2015-8365
* SECURITY UPDATE: cross-origin attack and arbitrary file read via the
concat protocol
- debian/confflags: disable concat protocol.
- CVE-2016-1897
- CVE-2016-1898
* SECURITY UPDATE: integer overflow in asf_write_packet
- debian/patches/CVE-2016-2326.patch: check pts in
libavformat/asfenc.c.
- CVE-2016-2326
* SECURITY UPDATE: out of bounds array access via tga file
- debian/patches/CVE-2016-2330.patch: fix lzw buffer size in
libavcodec/gif.c.
- CVE-2016-2330
-- Marc Deslauriers <email address hidden> Fri, 01 Apr 2016 08:30:13 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Precise
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- libs
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section | |
|---|---|---|---|---|
| Precise | updates | main | libs | |
| Precise | security | main | libs |
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| libav_0.8.17.orig.tar.gz | 5.1 MiB | 692da715af58373483b74d5eb3da43541a1c8b3f91fa079583c5c89445b3f764 |
| libav_0.8.17-0ubuntu0.12.04.2.debian.tar.gz | 47.0 KiB | d221c0295a586bfe02d83c785b697288cd6b4b08ce0b776b7bc32dc4b5fe4d1f |
| libav_0.8.17-0ubuntu0.12.04.2.dsc | 3.6 KiB | 780a96fbfd9c7c78bc706f7f66ed9caae1f66f469444fdea9c60bba1b0d4a404 |
Available diffs
Binary packages built by this source
- ffmpeg: Multimedia player, server, encoder and transcoder (transitional package)
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package is only used for transitional purposes and can be safely
removed when no other packages depend on this package.
- ffmpeg-dbg: Debug symbols for Libav related packages (transitional package)
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains debug data of the Libav related shared libraries.
.
Most people will not need this package. Please install it to produce useful
stacktraces to help debugging the Libav libraries.
.
This package is only used for transitional purposes and can be safely
removed.
- ffmpeg-doc: Documentation of the Libav API (transitional package)
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains the html doxygen documentation of the Libav API.
.
Only application developers will find this package useful.
.
This package is only used for transitional purposes and can be safely
removed.
- libav-dbg: Debug symbols for Libav related packages
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains debug data of the Libav related shared libraries.
.
Most people will not need this package. Please install it to produce useful
stacktraces to help debugging the Libav library.
- libav-doc: Documentation of the Libav API
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains the html doxygen documentation of the Libav API.
.
Only application developers will find this package useful.
- libav-source: Patched Libav sources
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains a tarball the source file that were used to produce
this package, containing all modifications that have been applied inline.
.
This package is used as build-dependency for 'libav-extra', which provides
the "extra" variants of libav.
- libav-tools: Multimedia player, server, encoder and transcoder
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains the avplay multimedia player, the avserver
streaming server, the avconv audio and video encoder, and the avprobe
stream analyzer. They support most existing file formats (AVI, MPEG,
OGG, Matroska, ASF...) and encoding formats (MPEG, DivX, MPEG4, AC3,
DV...).
- libav-tools-dbgsym: debug symbols for package libav-tools
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This package contains the avplay multimedia player, the avserver
streaming server, the avconv audio and video encoder, and the avprobe
stream analyzer. They support most existing file formats (AVI, MPEG,
OGG, Matroska, ASF...) and encoding formats (MPEG, DivX, MPEG4, AC3,
DV...).
- libavcodec-dev: Development files for libavcodec
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the codec library from Libav. It supports most existing
encoding formats (MPEG, DivX, MPEG4, AC3, DV...).
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libavcodec.
- libavcodec53: Libav codec library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the codec library from Libav (both encoding and decoding).
.
It supports most existing codecs (MPEG, MPEG2, MPEG4, AC3, DV...).
- libavcodec53-dbgsym: debug symbols for package libavcodec53
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the codec library from Libav (both encoding and decoding).
.
It supports most existing codecs (MPEG, MPEG2, MPEG4, AC3, DV...).
- libavdevice-dev: Development files for libavdevice
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the device handling library from Libav.
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libavdevice.
- libavdevice53: Libav device handling library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the device handling library from Libav.
- libavdevice53-dbgsym: debug symbols for package libavdevice53
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the device handling library from Libav.
- libavfilter-dev: Development files for libavfilter
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video filtering library from Libav.
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libavfilter.
- libavfilter2: Libav video filtering library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video filtering library from Libav.
- libavfilter2-dbgsym: debug symbols for package libavfilter2
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video filtering library from Libav.
- libavformat-dev: Development files for libavformat
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the demuxer library from Libav. It supports most
existing file formats (AVI, MPEG, OGG, Matroska, ASF...).
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libavformat.
- libavformat53: Libav file format library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the library for handling file formats from Libav.
.
It supports most existing file formats (AVI, MPEG, OGG, Matroska,
ASF...).
- libavformat53-dbgsym: debug symbols for package libavformat53
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the library for handling file formats from Libav.
.
It supports most existing file formats (AVI, MPEG, OGG, Matroska,
ASF...).
- libavutil-dev: Development files for libavutil
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the common utility library from Libav.
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libavutil.
- libavutil51: Libav utility library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the common utility library from Libav. It contains shared code
used by all other Libav libraries.
- libavutil51-dbgsym: debug symbols for package libavutil51
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the common utility library from Libav. It contains shared code
used by all other Libav libraries.
- libpostproc-dev: Development files for libpostproc
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video postprocessing library from Libav.
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libpostproc.
- libpostproc52: Libav video postprocessing library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video postprocessing library from Libav.
- libpostproc52-dbgsym: debug symbols for package libpostproc52
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video postprocessing library from Libav.
- libswscale-dev: Development files for libswscale
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video scaling library from Libav.
.
This package contains the header files and static libraries needed to
compile applications or shared objects that use libswscale.
- libswscale2: Libav video scaling library
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video software scaling library from Libav.
- libswscale2-dbgsym: debug symbols for package libswscale2
Libav is a complete, cross-platform solution to decode, encode, record,
convert and stream audio and video.
.
This is the video software scaling library from Libav.
