On Wed, Jan 4, 2012 at 1:35 AM, Michael Gilbert
michael.s.gilb...@gmail.com wrote:
the following CVE (Common Vulnerabilities Exposures) ids were
published for libav.
CVE-2011-3895[2]:
| Heap-based buffer overflow in the Vorbis decoder in Google Chrome
| before 15.0.874.120 allows remote
tag 654534 -patch
stop
On Mi, Jan 04, 2012 at 01:48:01 (CET), Michael Gilbert wrote:
Note patches are available on the CVE pages for these issues:
http://security-tracker.debian.org/tracker/source-package/libav
Please send the patches as attachments to this bug. I'm having a hard
time to
clone 654534 -1 -2 -3
retitle -1 CVE-2011-3892: Double free vulnerability in the Theora decoder
retitle -2 CVE-2011-3893: DoS in MKV demuxer
retitle -3 CVE-2011-3895: heap-based buffer overflow in vorbis decoder
forwarded -1 http://bugzilla.libav.org/show_bug.cgi?id=189
forwarded -2
Package: libav
Version: 4:0.7.3-2
Severity: serious
Tags: security
Hi,
the following CVE (Common Vulnerabilities Exposures) ids were
published for libav.
CVE-2011-3892[0]:
| Double free vulnerability in the Theora decoder in Google Chrome
| before 15.0.874.120 allows remote attackers to cause a
tag 654534 patch
thanks
Note patches are available on the CVE pages for these issues:
http://security-tracker.debian.org/tracker/source-package/libav
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact
5 matches
Mail list logo