bugtraq - [SECURITY] [DSA 3603-1] libav security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20160614204309.GA6781@pisco.westfalen.local>
Date: Tue, 14 Jun 2016 22:43:09 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3603-1] libav security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3603-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 14, 2016                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libav
CVE ID         : CVE-2016-3062

Several security issues have been corrected in multiple demuxers and
decoders of the libav multimedia library. A full list of the changes is
available at
https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.7

For the stable distribution (jessie), this problem has been fixed in
version 6:11.7-1~deb8u1.

We recommend that you upgrade your libav packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=qHxR
-----END PGP SIGNATURE-----