| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <E1UPUkb-0004el-4n@titan.mandriva.com> Date: Tue, 09 Apr 2013 11:22:00 +0200 From: security@...driva.com To: full-disclosure@...ts.grok.org.uk Subject: [ MDVSA-2013:079 ] ffmpeg -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2013:079 http://www.mandriva.com/en/support/security/ _______________________________________________________________________ Package : ffmpeg Date : April 9, 2013 Affected: Business Server 1.0 _______________________________________________________________________ Problem Description: Updated ffmpeg packages fix security vulnerabilities: h264: Add check for invalid chroma_format_idc (CVE-2012-0851) h263dec: Disallow width/height changing with frame threads (CVE-2011-3937) vc1dec: check that coded slice positions and interlacing match. This fixes out of array writes (CVE-2012-2796) alsdec: fix number of decoded samples in first sub-block in BGMC mode (CVE-2012-2790) cavsdec: check for changing w/h. Our decoder does not support changing w/h (CVE-2012-2777, CVE-2012-2784) indeo4: update AVCodecContext width/height on size change (CVE-2012-2787) avidec: use actually read size instead of requested size (CVE-2012-2788) wmaprodec: check num_vec_coeffs for validity (CVE-2012-2789) lagarith: check count before writing zeros (CVE-2012-2793) indeo3: fix out of cell write (CVE-2012-2776) indeo5: check tile size in decode_mb_info\(\). This prevents writing into a too small array if some parameters changed without the tile being reallocated (CVE-2012-2794) indeo5dec: Make sure we have had a valid gop header. This prevents decoding happening on a half initialized context (CVE-2012-2779) indeo4/5: check empty tile size in decode_mb_info\(\). This prevents writing into a too small array if some parameters changed without the tile being reallocated (CVE-2012-2800) dfa: improve boundary checks in decode_dds1\(\) (CVE-2012-2798) dfa: check that the caller set width/height properly (CVE-2012-2786) avsdec: Set dimensions instead of relying on the demuxer. The decode function assumes that the video will have those dimensions (CVE-2012-2801) ac3dec: ensure get_buffer\(\) gets a buffer for the correct number of channels (CVE-2012-2802) rv34: error out on size changes with frame threading (CVE-2012-2772) alsdec: check opt_order. Fixes out of array write in quant_cof. Also make sure no invalid opt_order stays in the context (CVE-2012-2775) This updates ffmpeg to version 0.10.6 which contains the security fixes above as well as other bug fixes. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3937 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0851 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2772 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2775 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2776 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2777 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2779 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2784 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2786 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2787 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2788 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2789 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2790 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2793 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2794 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2796 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2798 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2800 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2801 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2802 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0143 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0331 _______________________________________________________________________ Updated Packages: Mandriva Business Server 1/X86_64: 7ec17c8836596fed6d4ffb74005d8a99 mbs1/x86_64/ffmpeg-0.10.6-1.mbs1.x86_64.rpm 7592b8465ea19657f172c72930922601 mbs1/x86_64/lib64avcodec53-0.10.6-1.mbs1.x86_64.rpm 4d067d38c2d479fe6a289766f8d9908a mbs1/x86_64/lib64avfilter2-0.10.6-1.mbs1.x86_64.rpm b72d0caaf069957fa89d8f115cd43b7a mbs1/x86_64/lib64avformat53-0.10.6-1.mbs1.x86_64.rpm e60a449813850d40a969c5b0f8bd2f62 mbs1/x86_64/lib64avutil51-0.10.6-1.mbs1.x86_64.rpm 43932d0c784ba4393782d2ce497026fd mbs1/x86_64/lib64ffmpeg-devel-0.10.6-1.mbs1.x86_64.rpm e330d6894485635f68f4748bbc32f846 mbs1/x86_64/lib64ffmpeg-static-devel-0.10.6-1.mbs1.x86_64.rpm 49acf5dfd84f71781b6aaec19220bdd1 mbs1/x86_64/lib64postproc52-0.10.6-1.mbs1.x86_64.rpm 2e1033896765ad98629f8b51f7be31a3 mbs1/x86_64/lib64swresample0-0.10.6-1.mbs1.x86_64.rpm f132771fcbc699308f8fd1ee7e88ebdb mbs1/x86_64/lib64swscaler2-0.10.6-1.mbs1.x86_64.rpm 561c540d15bb89385f98f777e3297d51 mbs1/SRPMS/ffmpeg-0.10.6-1.mbs1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRY7OgmqjQ0CJFipgRAl2uAJ0fDJ2n9sE1uGYbabmS0XUWCcLSBwCdFl0K TKFyJV2QW8P1z5fnbjiF+lE= =l5WM -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists