On Fri, Feb 15, 2013 at 07:41:58PM +0100, Reinhard Tartler wrote: > --- a/Changelog > +++ b/Changelog > @@ -1,8 +1,39 @@ > > +- Fix uninitialized reads on malformed ogg files
Ogg > --- a/RELEASE > +++ b/RELEASE > @@ -222,3 +222,24 @@ ADPCM (CVE-2012-0852), and the KMVC decoder > (CVE-2011-3952). > + > +This maintenance-only release addresses a number a number of bugs such a number > +as security and compilation issues that have been brought to our > +attention. Among other fixes, this release features includes security > +updates for the mpeg12 codecs (CVE-2012-2803), H.264, VP5/VP6 > +(CVE-2012-2783, CVE-2012-2783), shorten (CVE-2012-0858), CAVS > +(CVE-2012-2777 and CVE-2012-2784), AVS (CVE-2012-2801) and a number of > +additional safe but important bugs in other decoders. Additionally, Among other fixes, this release includes ... > +their patches against this branch. For a full list of changes please one space only > +see the Changelog file or the git commit history. Git history Diego _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
