DLA-1654-1 libav missing?
Hi,
It looks like no advisory was sent out for this upload.
I noticed this while auditing the website for missing advisories. Yu'll
be happy to know that with the current patchset, this is the only older
advisory missing until the 2018 gap due to the mailing list crash. :)
See also:
https://salsa.debian.org/webmaster-team/webwml/merge_requests/53
A.
On 2019-01-31 22:50:29, Mike Gabriel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Format: 1.8
> Date: Mon, 21 Jan 2019 15:30:50 +0100
> Source: libav
> Binary: libav-tools libav-dbg libav-doc libavutil54 libavcodec56 libavdevice55 libavformat56 libavfilter5 libswscale3 libavutil-dev libavcodec-dev libavdevice-dev libavformat-dev libavfilter-dev libswscale-dev libavresample-dev libavresample2 libavcodec-extra-56 libavcodec-extra
> Architecture: source all amd64
> Version: 6:11.12-1~deb8u5
> Distribution: jessie-security
> Urgency: medium
> Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
> Changed-By: Mike Gabriel <sunweaver@debian.org>
> Description:
> libav-dbg - Debug symbols for Libav related packages
> libav-doc - Documentation of the Libav API
> libav-tools - Multimedia player, encoder and transcoder
> libavcodec-dev - Development files for libavcodec
> libavcodec-extra - Libav codec library (additional codecs meta-package)
> libavcodec-extra-56 - Libav codec library (additional codecs)
> libavcodec56 - Libav codec library
> libavdevice-dev - Development files for libavdevice
> libavdevice55 - Libav device handling library
> libavfilter-dev - Development files for libavfilter
> libavfilter5 - Libav video filtering library
> libavformat-dev - Development files for libavformat
> libavformat56 - Libav file format library
> libavresample-dev - Development files for libavresample
> libavresample2 - Libav audio resampling library
> libavutil-dev - Development files for libavutil
> libavutil54 - Libav utility library
> libswscale-dev - Development files for libswscale
> libswscale3 - Libav video scaling library
> Changes:
> libav (6:11.12-1~deb8u5) jessie-security; urgency=medium
> .
> * Non-maintainer upload by the LTS team..
> * CVE-2015-1207: avformat/mov: Fix integer overflow in
> mov_read_udta_string().
> * CVE-2017-14169: In mxf_read_primer_pack() function, catch item_num
> being negative, to avoid bypassing the check for a large value.
> * CVE-2017-14223: avformat/asfdec: Fix DoS in asf_build_simple_index().
> Fix missing EOF check in loop.
> * CVE-2017-7863: Bail out if trns was found before IHDR or IDAT in PNG data.
> * CVE-2014-8542: Add case for jv to avcodec_align_dimensions2().
> * CVE-2017-7865: Add case for interplay_video to avcodec_align_dimensions2().
> Checksums-Sha1:
> d1c670a1ede382a8c0a379895d99f2de6a9d8309 4023 libav_11.12-1~deb8u5.dsc
> 4b74b8714868803c8b6b23df9b31e3c1d7e3a456 71392 libav_11.12-1~deb8u5.debian.tar.xz
> c364c438d26c1fe025166e7cbb541f54c7318496 18445106 libav-doc_11.12-1~deb8u5_all.deb
> 3862b02852aec371a5350796e07af48777ff4b39 66616 libavcodec-extra_11.12-1~deb8u5_all.deb
> 894d06bcacdf38396263eee1447d6576432f66da 474142 libav-tools_11.12-1~deb8u5_amd64.deb
> df4f9221da0209d855c8b43c4922f60fd66ba90a 21594462 libav-dbg_11.12-1~deb8u5_amd64.deb
> 210fc9597bc1f20b2b47d9f10b13bb0eec6b5aa2 131622 libavutil54_11.12-1~deb8u5_amd64.deb
> 8bbd6cb7be9e56840566b69514929d90df355428 3108618 libavcodec56_11.12-1~deb8u5_amd64.deb
> 9f492a7d32650e046c2e94e70c6eadc0e8c977a4 91496 libavdevice55_11.12-1~deb8u5_amd64.deb
> 66eac9eea9f2bc0640a1c123056cf39eb18ee707 586708 libavformat56_11.12-1~deb8u5_amd64.deb
> 4ef6c0f8076ef84482b5e44a1b6b2a89448a4df1 172670 libavfilter5_11.12-1~deb8u5_amd64.deb
> 08c94862cba93c2a25af004cd55f0f9ab9338788 145058 libswscale3_11.12-1~deb8u5_amd64.deb
> 375995325b23da7c3a6902d483527385c22151b2 193714 libavutil-dev_11.12-1~deb8u5_amd64.deb
> 1a782d1210d682704263ad81147994eed571273b 3431898 libavcodec-dev_11.12-1~deb8u5_amd64.deb
> 1f9411c19c4d4d1c4e3bfa85d4097455c998de8a 94544 libavdevice-dev_11.12-1~deb8u5_amd64.deb
> 8e04147d34c357e9de0321049235903b725b34bc 692202 libavformat-dev_11.12-1~deb8u5_amd64.deb
> 31887c8c10b450d83b2ffc2fa63a3d1d176f6818 203786 libavfilter-dev_11.12-1~deb8u5_amd64.deb
> b8261e35500052f89513f64f8fb9f1e498719273 157922 libswscale-dev_11.12-1~deb8u5_amd64.deb
> 419950f0408b0521c48847088b03aecf17c67d96 112968 libavresample-dev_11.12-1~deb8u5_amd64.deb
> 7d2e43e8e94af40eb99dd423a8943292a98beb39 104020 libavresample2_11.12-1~deb8u5_amd64.deb
> 9183cc4c375475f84d9b6cb45e8f6790b1264c46 3113166 libavcodec-extra-56_11.12-1~deb8u5_amd64.deb
> Checksums-Sha256:
> 814e2e8337cf050ed55f62c1a8ec60934e027df64b84ed9bce9cf8a2c8816578 4023 libav_11.12-1~deb8u5.dsc
> b8c0bc197ef098a9bae1c9180ed3220606fe9c80f9b44ab9d98637417dae28ef 71392 libav_11.12-1~deb8u5.debian.tar.xz
> ab761dea136d2bf1171783c4e779edc6bb9c9a4dc058379ff23f77db0e5b05c5 18445106 libav-doc_11.12-1~deb8u5_all.deb
> 3ad77da635f76f8423066d42adf4454bf3f56cd433f1e9ca4ee01299a8f46fb3 66616 libavcodec-extra_11.12-1~deb8u5_all.deb
> af4a45ea4d52c902740d98073cf9004eb6fa82e7131619e94b4d0fb799571258 474142 libav-tools_11.12-1~deb8u5_amd64.deb
> a6a7e93b38c872df83ab5ebc1688c37cce529985bcb41c7d81eeaea6c74854dd 21594462 libav-dbg_11.12-1~deb8u5_amd64.deb
> 5ac5661219c0e1a1e0f9a3aa0941f21a0b5970d9be519997cf32771e41057548 131622 libavutil54_11.12-1~deb8u5_amd64.deb
> 7ce91e9759e6e942fe2f6e9fa0313f1609e91ecb9df05ce8de30c2debb065d95 3108618 libavcodec56_11.12-1~deb8u5_amd64.deb
> 5fffe25e1d76c5b7e16a736cf37cc8057fd195a8ea75fc1a9f1ba3e9daa9e41f 91496 libavdevice55_11.12-1~deb8u5_amd64.deb
> 6cd73000322396ab99d43783f157a9874a0482efc3bc2a486491f630971c8345 586708 libavformat56_11.12-1~deb8u5_amd64.deb
> 2c69feb2f7d14f86150f14a892db47499219e6280706b08ce1dbee7cc9aacab7 172670 libavfilter5_11.12-1~deb8u5_amd64.deb
> c0c7bac55527dfa41aa1737000ea9920b5aeeb0545c193607128316de68c2e54 145058 libswscale3_11.12-1~deb8u5_amd64.deb
> 12cb0a375e9ab2e75284d24b57f470cbdfb5078c58da34281e3e820fe25e299e 193714 libavutil-dev_11.12-1~deb8u5_amd64.deb
> 8ee1b6b32e36312e039f61db69afc77ff3a10629cf1308e425e8e29293ed4bec 3431898 libavcodec-dev_11.12-1~deb8u5_amd64.deb
> 6144b861964ca310f896dc4b4618ae4265ebc6fcf0a50d9875653351fd10f0bf 94544 libavdevice-dev_11.12-1~deb8u5_amd64.deb
> a94bde289db3138682a9735b8be864ebde3b1ea35524502f4383b339f217aa28 692202 libavformat-dev_11.12-1~deb8u5_amd64.deb
> 1427a628261d65d6fa180529842953fa11d77444ab7ea42c43ce41af52f5ab2b 203786 libavfilter-dev_11.12-1~deb8u5_amd64.deb
> d68c1ce1ed34e39901a2625c7a5d03a434ab45a1a5d92bdea80829868f3fb6be 157922 libswscale-dev_11.12-1~deb8u5_amd64.deb
> c634fb63be69756673d065ab723b75e5529bbd7a62a23b3f749f571ccb65ffb4 112968 libavresample-dev_11.12-1~deb8u5_amd64.deb
> 66ef28a681ac156d04b78059351e3acea018e18837986445dd8f6b141c0e7b0e 104020 libavresample2_11.12-1~deb8u5_amd64.deb
> eb7bc7b6597b029d5a599558fc79a684b7f2616f1e64d793ed15b8d44dddedef 3113166 libavcodec-extra-56_11.12-1~deb8u5_amd64.deb
> Files:
> a95fdaf6f9864395c7866d80d0f95647 4023 libs optional libav_11.12-1~deb8u5.dsc
> 6b08925036ca9d369bb45748dc0a7ec6 71392 libs optional libav_11.12-1~deb8u5.debian.tar.xz
> 71d791b9b0d84b27dabb22f56c7691d5 18445106 doc optional libav-doc_11.12-1~deb8u5_all.deb
> 9e28d763e87cdfe05ae63b4bf963e782 66616 metapackages extra libavcodec-extra_11.12-1~deb8u5_all.deb
> 8c098b58d56fc08a6882ce5de1f37ebf 474142 video optional libav-tools_11.12-1~deb8u5_amd64.deb
> 449e7af4d15894a4a28315eddab439c4 21594462 debug extra libav-dbg_11.12-1~deb8u5_amd64.deb
> 642457fb1858a8149c1bea18d073b3dd 131622 libs optional libavutil54_11.12-1~deb8u5_amd64.deb
> 24157d975eff5b05485b174a06998466 3108618 libs optional libavcodec56_11.12-1~deb8u5_amd64.deb
> 5e65f52d1fa62cfb3e0cc5b1a4527140 91496 libs optional libavdevice55_11.12-1~deb8u5_amd64.deb
> 95597adc0cc9586a4dd9d09d9718663a 586708 libs optional libavformat56_11.12-1~deb8u5_amd64.deb
> 882bd5e8304f2355623ecff9658a9f7b 172670 libs optional libavfilter5_11.12-1~deb8u5_amd64.deb
> c1b583841912404b5f2ba4d993463495 145058 libs optional libswscale3_11.12-1~deb8u5_amd64.deb
> c66fe27359bc8cf52b4f03fe0a1b01dc 193714 libdevel optional libavutil-dev_11.12-1~deb8u5_amd64.deb
> 1818a4233e196391f78157ec13384296 3431898 libdevel optional libavcodec-dev_11.12-1~deb8u5_amd64.deb
> 003ffcea2281b409ef5fb16d743ccbd4 94544 libdevel optional libavdevice-dev_11.12-1~deb8u5_amd64.deb
> a10db00973c17d380196b6135ab79a60 692202 libdevel optional libavformat-dev_11.12-1~deb8u5_amd64.deb
> a53cbaf1b816979ca5696832c5e0f6ea 203786 libdevel optional libavfilter-dev_11.12-1~deb8u5_amd64.deb
> baf0c5eaa14480c18fed22deea8dadb5 157922 libdevel optional libswscale-dev_11.12-1~deb8u5_amd64.deb
> b3885069aa6d20ee90e4101753ab4a61 112968 libdevel optional libavresample-dev_11.12-1~deb8u5_amd64.deb
> 9df807f62a2057fa8f7ff9e8c13a7b9c 104020 libs optional libavresample2_11.12-1~deb8u5_amd64.deb
> 4b4e5f4e98060cb7b5c4cf7a5d3c8549 3113166 libs optional libavcodec-extra-56_11.12-1~deb8u5_amd64.deb
>
> -----BEGIN PGP SIGNATURE-----
>
> iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAlxTePwVHHN1bndlYXZl
> ckBkZWJpYW4ub3JnAAoJEJr0azAldxsx2iMP/3HHyxtKLhHRYF4NK8EwsOfH89T2
> E05zfJYJeqGRXYRj0KlAwCS9wV1weGmhhDXuR1wYHswfLo86Rb7uE4JOuh3/h+fO
> J6+0guHLQF/hC3zszui4/YFb59mZobs4Jq2PvryvVx9BHkmGcggSwJ66pLBgM1tJ
> pHCfbkchY15szV0IHDE7AcoQRFkHX6BKTxgL/xSSQy1nzzs339McCdMLs3OPHlLb
> YZ+IKkqDVyR8vF489FXivzn9f0XSyp/akNVPCrC0X5VLDye9Xc+/YYF1K0K4IOPP
> E6P96YlgI+22VzHXVq4fWEoGNRmly0BYgvA4g05x2Fyn71MyjcpT9M70KiPI7BH6
> hYWmPREhagkRt3L3HB1bxoHdMZCYJCjilEppJvBj4UiTZa589BVBd35BPHN3Iw2f
> 0EfXkmA+0nY67i9HEk+LZWuXGP4wVxXSE8X5BqL2+HnRY9GLbiihMH2ULTNhJinx
> Z4nS5y16fQ3+fagefvdqQPNUJWxZ26/uH4V7PX7HmU4n4ygv/L5Ou1wK0GizGMWZ
> b0uNDoyOJ/WxUEUWDXYmDeupj/gFBt18cXnYeGElktDuZRRGy9YI3AtXe2YYE6wW
> /1EiMyrRruoha30b7kGJIIlopZA7upoOI+MnO+w8HNjFqSXm61goi6zm7pAzS4Tk
> nAmc1/wjQksoBj75
> =7eHS
> -----END PGP SIGNATURE-----
--
People arbitrarily, or as a matter of taste, assigning numerical values
to non-numerical things. And then they pretend that they haven't just
made the numbers up, which they have. Economics is like astrology in
that sense, except that economics serves to justify the current power
structure, and so it has a lot of fervent believers among the powerful.
- Kim Stanley Robinson, Red Mars
Reply to: