libav - security update

Fixed packages 1

Vulnerabilities 17

• Unscored —
  CVE-2014-9317

  The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4…

  ffmpeg Debian
  Dec 9, 2014
• Unscored —
  CVE-2015-6761

  The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.7…

  chromium-browser oxide-qt ffmpeg libav Debian Ubuntu
  Oct 15, 2015
• Unscored —
  CVE-2015-6818

  The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (a…

  ffmpeg Debian
  Sep 6, 2015
• Unscored —
  CVE-2015-6820

  The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax …

  ffmpeg libav Debian Ubuntu
  Sep 6, 2015
• Unscored —
  CVE-2015-6821

  The ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not properly maintain the encodin…

  ffmpeg libav Debian Ubuntu
  Sep 6, 2015
• Unscored —
  CVE-2015-6822

  The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width va…

  ffmpeg Debian
  Sep 6, 2015
• Unscored —
  CVE-2015-6825

  The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-alloca…

  ffmpeg Debian
  Sep 6, 2015
• Unscored —
  CVE-2015-6826

  The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain st…

  ffmpeg libav Debian Ubuntu
  Sep 6, 2015
• Unscored —
  CVE-2015-8216

  The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height check…

  ffmpeg Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-8217

  The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indic…

  ffmpeg Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-8363

  The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8…

  ffmpeg Debian
  Nov 26, 2015
• Unscored —
  CVE-2015-8364

  Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and…

  ffmpeg libav Debian Ubuntu
  Nov 26, 2015
• Unscored —
  CVE-2015-8661

  The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationshi…

  ffmpeg Debian
  Dec 24, 2015
• Unscored —
  CVE-2015-8662

  The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposi…

  ffmpeg Debian
  Dec 24, 2015
• Unscored —
  CVE-2015-8663

  The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failu…

  ffmpeg Debian
  Dec 24, 2015
• Unscored —
  CVE-2016-10190 Public exploit

  Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3…

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Feb 9, 2017
• Unscored —
  CVE-2016-10191 Public exploit

  Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, an…

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Feb 9, 2017