bugtraq - [SECURITY] [DSA 3833-1] libav security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20170424212642.be57nnyynjytvziy@pisco.westfalen.local>
Date: Mon, 24 Apr 2017 23:26:42 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3833-1] libav security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3833-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 24, 2017                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libav
CVE ID         : CVE-2016-9821 CVE-2016-9822

Several security issues have been corrected in multiple demuxers and
decoders of the libav multimedia library. A full list of the changes is
available at
https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.9
		       
For the stable distribution (jessie), these problems have been fixed in
version 6:11.9-1~deb8u1.

We recommend that you upgrade your libav packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=vzOy
-----END PGP SIGNATURE-----