~ubuntu-branches/ubuntu/precise/libav/precise-security : changes

~ubuntu-branches/ubuntu/precise/libav/precise-security » Changes from revision 32

From Revision 32 to 13

Rev	Summary	Authors	Tags	Date
32	* SECURITY UPDATE: invalid memory access via crafted MJPEG d... * SECURITY UPDATE: invalid memory access via crafted MJPEG data - debian/patches/CVE-2014-8541.patch: check for pixel format changes in libavcodec/mjpegdec.c. - CVE-2014-8541 * SECURITY UPDATE: out of array access in ff_mjpeg_decode_sof - debian/patches/CVE-2015-1872.patch: check number of components in libavcodec/mjpegdec.c. - CVE-2015-1872 * SECURITY UPDATE: out of bounds array access in msrle_decode_pal4 - debian/patches/CVE-2015-3395.patch: determine frame size in libavcodec/msrledec.c. - CVE-2015-3395 * SECURITY UPDATE: size issue in ff_h263_decode_picture_header - debian/patches/CVE-2015-5479.patch: check both dimensions in libavcodec/ituh263dec.c. - CVE-2015-5479 * SECURITY UPDATE: out of bounds array access in decode_ihdr_chunk - debian/patches/CVE-2015-6818.patch: only allow one IHDR chunk in libavcodec/pngdec.c. - CVE-2015-6818 * SECURITY UPDATE: out of bounds array access in ff_sbr_apply - debian/patches/CVE-2015-6820.patch: check that the element type matches in libavcodec/aacsbr.c, libavcodec/sbr.h. - CVE-2015-6820 * SECURITY UPDATE: uninitialized memory access in sws_init_context - debian/patches/CVE-2015-6824.patch: clear buffers in libswscale/utils.c - CVE-2015-6824 * SECURITY UPDATE: invalid pointer use in ff_rv34_decode_init_thread_copy - debian/patches/CVE-2015-6826.patch: clear pointers in libavcodec/rv34.c. - CVE-2015-6826 * SECURITY UPDATE: integer overflow in ff_ivi_init_planes - debian/patches/CVE-2015-8364.patch: check image dimensions in libavcodec/ivi_common.c. - CVE-2015-8364 * SECURITY UPDATE: out of bounds array access in smka_decode_frame - debian/patches/CVE-2015-8365.patch: validate data size in libavcodec/smacker.c. - CVE-2015-8365 * SECURITY UPDATE: cross-origin attack and arbitrary file read via the concat protocol - debian/confflags: disable concat protocol. - CVE-2016-1897 - CVE-2016-1898 * SECURITY UPDATE: integer overflow in asf_write_packet - debian/patches/CVE-2016-2326.patch: check pts in libavformat/asfenc.c. - CVE-2016-2326 * SECURITY UPDATE: out of bounds array access via tga file - debian/patches/CVE-2016-2330.patch: fix lzw buffer size in libavcodec/gif.c. - CVE-2016-2330	Marc Deslauriers	4:0.8.17-0ubuntu0.12.04.2	8 years ago
31	* Update to 0.8.17 to fix multiple security issues (LP: #143... * Update to 0.8.17 to fix multiple security issues (LP: #1432610) - CVE-2014-8542 - CVE-2014-8543 - CVE-2014-8544 - CVE-2014-8547 - CVE-2014-8548 - CVE-2014-9604	Marc Deslauriers	4:0.8.17-0ubuntu0.12.04.1	9 years ago
30	* Update to 0.8.16 to fix multiple security issues (LP: #137... * Update to 0.8.16 to fix multiple security issues (LP: #1370175) * debian/patches/fix_ftbfs_ff_get_buffer.patch: dropped, no longer needed. * debian/patches/04-ffmpeg-warning-change.patch: dropped, no longer needed.	Marc Deslauriers	4:0.8.16-0ubuntu0.12.04.1	9 years ago
29	* Update to 0.8.15 to fix multiple security issues (LP: #135... * Update to 0.8.15 to fix multiple security issues (LP: #1354755) * debian/patches/fix_ftbfs_ff_get_buffer.patch: Add more missing #includes for ff_get_buffer() to fix ftbfs.	Marc Deslauriers	4:0.8.15-0ubuntu0.12.04.1	9 years ago
28	Update to 0.8.13 to fix multiple security issues (LP: #13412... Update to 0.8.13 to fix multiple security issues (LP: #1341216)	Marc Deslauriers	4:0.8.13-0ubuntu0.12.04.1	9 years ago
27	* SECURITY UPDATE: Update to 0.8.12 to fix multiple security... * SECURITY UPDATE: Update to 0.8.12 to fix multiple security issues - CVE-2014-3984	Marc Deslauriers	4:0.8.12-0ubuntu0.12.04.1	9 years ago
26	Update to 0.8.10 to fix multiple security issues (LP: #12771... Update to 0.8.10 to fix multiple security issues (LP: #1277173)	Marc Deslauriers	4:0.8.10-0ubuntu0.12.04.1	10 years ago
25	Update to 0.8.9 to fix multiple security issues (LP: #124962... Update to 0.8.9 to fix multiple security issues (LP: #1249621)	Marc Deslauriers	4:0.8.9-0ubuntu0.12.04.1	10 years ago
24	Update to 0.8.8 to fix multiple security issues (LP: #124280... Update to 0.8.8 to fix multiple security issues (LP: #1242802)	Marc Deslauriers	4:0.8.8-0ubuntu0.12.04.1	10 years ago
23	* Update to 0.8.6 to fix multiple security issues. (LP: #116... * Update to 0.8.6 to fix multiple security issues. (LP: #1163354) - CVE-2013-0894 - CVE-2013-2277 - CVE-2013-2495 - CVE-2013-2496	Marc Deslauriers	4:0.8.6-0ubuntu0.12.04.1	11 years ago
22	* Update to 0.8.5 to fix multiple security issues. (LP: #110... * Update to 0.8.5 to fix multiple security issues. (LP: #1104019) - CVE-2012-2783 - CVE-2012-2791 - CVE-2012-2797 - CVE-2012-2798 - CVE-2012-2801 - CVE-2012-2802 - CVE-2012-2803 - CVE-2012-2804 - CVE-2012-5144	Marc Deslauriers	4:0.8.5-0ubuntu0.12.04.1	11 years ago
21	* Update to 0.8.4 to fix multiple security issues. (LP: #107... * Update to 0.8.4 to fix multiple security issues. (LP: #1075593) - CVE-2012-2772 - CVE-2012-2775 - CVE-2012-2776 - CVE-2012-2777 - CVE-2012-2779 - CVE-2012-2784 - CVE-2012-2786 - CVE-2012-2787 - CVE-2012-2788 - CVE-2012-2789 - CVE-2012-2790 - CVE-2012-2793 - CVE-2012-2794 - CVE-2012-2796 - CVE-2012-2798 - CVE-2012-2800 - CVE-2012-2801 - CVE-2012-2802	Marc Deslauriers	4:0.8.4-0ubuntu0.12.04.1	11 years ago
20	* Update to 0.8.3 to fix multiple security issues. (LP: #101... * Update to 0.8.3 to fix multiple security issues. (LP: #1012132) - CVE-2012-0851 - CVE-2012-0947 * debian/patches/04-ffmpeg-warning-change.patch: Update warning to make clearer the deprecation of ffmpeg binary. (LP: #939863)	Marc Deslauriers	4:0.8.3-0ubuntu0.12.04.1	11 years ago
19	* New upstream bug and security fix release (FFe: LP: #96094... * New upstream bug and security fix release (FFe: LP: #960949) - fixes the following CVEs: CVE-2012-0848, CVE-2012-0853, CVE-2012-0858, CVE-2011-3929, CVE-2011-3936, CVE-2011-3937, CVE-2011-3940, CVE-2011-3945, CVE-2011-3947, CVE-2011-3951, CVE-2011-3952 * Pull fix from Debian git to fix installation of avserver.conf and recordshow.sh into libav-tools; Thanks to Julien Cristau for spotting this! - update debian/rules	Micah Gersten	4:0.8.1-0ubuntu1	12 years ago
18	No-change rebuild to pick libvpx's new shlibs. (LP: #926580) No-change rebuild to pick libvpx's new shlibs. (LP: #926580)	Alessio Treglia	4:0.8-1ubuntu2	12 years ago
17	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, x264, and xvid (all in universe)	Reinhard Tartler	4:0.8-1ubuntu1	12 years ago
16	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, x264, and xvid (all in universe)	Reinhard Tartler	4:0.8~beta2-3ubuntu1	12 years ago
15	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, x264, and xvid (all in universe)	Reinhard Tartler	4:0.8~beta2-1ubuntu1	12 years ago
14	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, x264, and xvid (all in universe) * Install libraries in multi-arch directories.	Reinhard Tartler	4:0.7.3-2ubuntu1	12 years ago
13	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg, lame, xvid, x264 (all in universe) - not installing into multiarch directories * This new upstream release has basically merged in all 70 patches that are present in 4:0.7.1-7ubuntu2, plus some additional, similarily focused ones.	Reinhard Tartler	4:0.7.2-1ubuntu1	12 years ago

Older »