ffmpeg-debian 3:0.svn20080206-12ubuntu3.2 source package in Ubuntu
Changelog
ffmpeg-debian (3:0.svn20080206-12ubuntu3.2) intrepid-security; urgency=low
* SECURITY UPDATE: Fix a multitude of security issues
- debian/patches/CVE-2009-46XX/security-issue03.patch: check stream
existence before assignment
- debian/patches/CVE-2009-46XX/security-issue04.patch: check submap
indexes
- debian/patches/CVE-2009-46XX/security-issue05.patch: check classbook
value
- debian/patches/CVE-2009-46XX/security-issue06.patch: add checks for
per-packet mode indexes and per-header mode mapping indexes
- debian/patches/CVE-2009-46XX/security-issue07.patch: check masterbook
index and subclass book index.
- debian/patches/CVE-2009-46XX/security-issue08.patch: check
res_setup->books
- debian/patches/CVE-2009-46XX/security-issue09.patch: check
begin/end/partition_size
- debian/patches/CVE-2009-46XX/security-issue10.patch: check validity
of channels & samplerate
- debian/patches/CVE-2009-46XX/security-issue11.patch: fix book_idx
check
- debian/patches/CVE-2009-46XX/security-issue12.patch: sanity checks
for magnitude and angle
- debian/patches/CVE-2009-46XX/security-issue13.patch: fix = -> == typo
- debian/patches/CVE-2009-46XX/security-issue14.patch: check dimensions
against 0 too
- debian/patches/CVE-2009-46XX/security-issue15.patch: fix
init_get_bits() buffer size
- debian/patches/CVE-2009-46XX/security-issue17.patch: make sure that
all memory allocations succeed
- debian/patches/CVE-2009-46XX/security-issue18.patch: fix possible
buffer over-read in vorbis_comment
- debian/patches/CVE-2009-46XX/security-issue19.patch: set data_size to
0 to avoid having it uninitialized
- debian/patches/CVE-2009-46XX/security-issue20.patch: disable parsing
for ogg streams where no ogg header was found
- debian/patches/CVE-2009-46XX/security-issue22.patch: check codec_id
and codec_type, make sure priv_data is freed and codec is set to NULL
- CVE-2009-4632
- CVE-2009-4633
- CVE-2009-4634
- CVE-2009-4635
- CVE-2009-4637
- CVE-2009-4639
- CVE-2009-4640
-- Marc Deslauriers <email address hidden> Thu, 08 Apr 2010 09:13:16 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Intrepid
- Original maintainer:
- Reinhard Tartler
- Architectures:
- any
- Section:
- libs
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| ffmpeg-debian_0.svn20080206.orig.tar.gz | 2.8 MiB | c601491896e5584906014a6b717b7b59fdc2586f86ca815884c8cbc68dab6738 |
| ffmpeg-debian_0.svn20080206-12ubuntu3.2.diff.gz | 40.9 KiB | 1ba1d4b9fedec3435074b5468acdab6766278fb56567cb378b267a9f215bf22f |
| ffmpeg-debian_0.svn20080206-12ubuntu3.2.dsc | 1.9 KiB | 9eb4a29bfd11e9b931643b35d08e188927f645b585fa098015614e6f86508808 |
Available diffs
Binary packages built by this source
- ffmpeg: No summary available for ffmpeg in ubuntu intrepid.
No description available for ffmpeg in ubuntu intrepid.
- ffmpeg-dbg: No summary available for ffmpeg-dbg in ubuntu intrepid.
No description available for ffmpeg-dbg in ubuntu intrepid.
- ffmpeg-doc: No summary available for ffmpeg-doc in ubuntu intrepid.
No description available for ffmpeg-doc in ubuntu intrepid.
- libavcodec-dev: No summary available for libavcodec-dev in ubuntu intrepid.
No description available for libavcodec-dev in ubuntu intrepid.
- libavcodec51: No summary available for libavcodec51 in ubuntu intrepid.
No description available for libavcodec51 in ubuntu intrepid.
- libavdevice-dev: No summary available for libavdevice-dev in ubuntu intrepid.
No description available for libavdevice-dev in ubuntu intrepid.
- libavdevice52: No summary available for libavdevice52 in ubuntu intrepid.
No description available for libavdevice52 in ubuntu intrepid.
- libavformat-dev: No summary available for libavformat-dev in ubuntu intrepid.
No description available for libavformat-dev in ubuntu intrepid.
- libavformat52: No summary available for libavformat52 in ubuntu intrepid.
No description available for libavformat52 in ubuntu intrepid.
- libavutil-dev: No summary available for libavutil-dev in ubuntu intrepid.
No description available for libavutil-dev in ubuntu intrepid.
- libavutil49: No summary available for libavutil49 in ubuntu intrepid.
No description available for libavutil49 in ubuntu intrepid.
- libpostproc-dev: No summary available for libpostproc-dev in ubuntu intrepid.
No description available for libpostproc-dev in ubuntu intrepid.
- libpostproc51: No summary available for libpostproc51 in ubuntu intrepid.
No description available for libpostproc51 in ubuntu intrepid.
- libswscale-dev: No summary available for libswscale-dev in ubuntu intrepid.
No description available for libswscale-dev in ubuntu intrepid.
- libswscale0: No summary available for libswscale0 in ubuntu intrepid.
No description available for libswscale0 in ubuntu intrepid.
