Bugs fixes in "libav"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| Launchpad | 1643467 | Firefox 50 blocks Ubuntu 12.04 and 14.04 LTS's version of libavcodec | 2016-12-08 |
| Launchpad | 1643467 | Firefox 50 blocks Ubuntu 12.04 and 14.04 LTS's version of libavcodec | 2016-12-08 |
| CVE | CVE-2016-2330 | libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of | 2016-04-04 |
| CVE | CVE-2016-2326 | Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service | 2016-04-04 |
| CVE | CVE-2016-1898 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming ( | 2016-04-04 |
| CVE | CVE-2016-1897 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (H | 2016-04-04 |
| CVE | CVE-2015-8365 | The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the d | 2016-04-04 |
| CVE | CVE-2015-8364 | Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows re | 2016-04-04 |
| CVE | CVE-2015-6826 | The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows | 2016-04-04 |
| CVE | CVE-2015-6824 | The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote at | 2016-04-04 |
| CVE | CVE-2015-6820 | The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with | 2016-04-04 |
| CVE | CVE-2015-6818 | The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PN | 2016-04-04 |
| CVE | CVE-2015-3395 | The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4 | 2016-04-04 |
| CVE | CVE-2015-1872 | The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Fra | 2016-04-04 |
| CVE | CVE-2014-8541 | libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an im | 2016-04-04 |
| CVE | CVE-2016-2330 | libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of | 2016-04-04 |
| CVE | CVE-2016-2326 | Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service | 2016-04-04 |
| CVE | CVE-2016-1898 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming ( | 2016-04-04 |
| CVE | CVE-2016-1897 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (H | 2016-04-04 |
| CVE | CVE-2015-8365 | The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the d | 2016-04-04 |
About
-
Send Feedback to @ubuntu_updates
