1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 2977-1] libav security update

    From Moritz Muehlenhoff@1:229/2 to All on Fri Jul 11 16:40:02 2014
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2977-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff
    July 11, 2014 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libav
    CVE ID : CVE-2014-4609

    Don A. Baley discovered an integer overflow in the lzo compression
    handler which could result in the execution of arbitrary code.

    For the stable distribution (wheezy), this problem has been fixed in
    version 6:0.8.13-1.

    For the testing distribution (jessie), this problem has been fixed in
    version 6:10.2-1.

    For the unstable distribution (sid), this problem has been fixed in
    version 6:10.2-1.

    We recommend that you upgrade your libav packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJTv/SJAAoJEBDCk7bDfE42NzgQAJ0/xpyy6udjIwGiyySc/6EJ Z4sVczkj0tLqHLLpCmmF2nA3suJxTtxiUfm7Ss0+qNu7X4bBAkmRxHtMuBIz7lNR JZJqTCR8olcjBfQPBA/jNRQzltzlubWJgPVKQR5zHTzPRW6RCw0Rvx2JMCUGFzXI H1a8hz8MvJujzVAb3lQML0JuI+AjfMdriQZsRrBDCjP1061GDMUXF8Y3Uorp5LAU Rm9Mfxz8f1TyU8N+B+JoS0Z8zg+OtfP5avYeaUK3Io5KCkjWZTyjFifxADFaHq1p Tfc9XoJ/e+AEGDFJ8gm7GFTxUJkUNfEOKPzUiqkGoO3aGNIw1ktJ6qMYBj2T1AIh TCZ+HHy6xpVi1Zy3f5Updd3MSYYePEI9WXsnPXqlAtZrbhqk7UNB+ResGaPczToX QhR9GZKCl4yXFb1+MWpq0V9xSYgbgMbV8yq9nlQ3qVGlbq/D8ruZ53bqg2FK2/XV xdlgvMINJdeRiTpfeO2BFC6J7wxqM8Jny1sXD9Rqwc8DMzojNOXXTlwaPNcPXNYo ghBhMQKM8UlsK9eQ5GAE14o2TRJHAAvMo2qhTQ066J5ubQaJ2lO+KEUEUDs1FAon Xmi11naXPLjQdN29ni+PI51S3R8LpMamCpY6luZIYVUbtP0h5qa6WuezSdPeZkn5 6UnRAcK5UEf8mYTPLjGx
    =qX0n
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)