Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at ;a=blob;f=Changelog;hb=refs/tags/v11.8 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3685-1
backported fix for stack overflow in DER decoder. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-5182 2015-03-31 17:08:49 -------------------------------------------------------------------------------- Name : libtasn1 Product : Fedora 20 Version : 3.8 Release : 3.fc20 URL : Summary : The ASN.1 library used in GNUTLS Description : A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. -------------------------------------------------------------------------------- Update Information: backported fix for stack overflow in DER decoder -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 30 2015 Nikos Mavrogiannopoulos - 3.8-3 - backported fix for stack overflow in DER decoder * Thu Sep 4 2014 Nikos Mavrogiannopoulos - 3.8-2 - added bug fix for octet string decoding (#1138218) * Mon Aug 25 2014 Nikos Mavrogiannopoulos - 3.8-1 - new upstream release * Mon Jun 30 2014 Nikos Mavrogiannopoulos - 3.7-1 - new upstream release * Mon May 26 2014 Nikos Mavrogiannopoulos - 3.6-1 - new upstream release * Fri May 2 2014 Nikos Mavrogiannopoulos - 3.5-1 - new upstream release * Wed Nov 27 2013 Nikos Mavrogiannopoulos - 3.4-1 - new upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1207192 - CVE-2015-2806 libtasn1: stack overflow in asn1_der_decoding https://bugzilla.redhat.com/show_bug.cgi?id=1207192 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libtasn1' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with theFedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at ;a=blob;f=Changelog;hb=refs/tags/v0.8.15 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3027-1
Get the latest Linux and open source security news straight to your inbox.