On Mon, Oct 29, 2012 at 7:12 PM, Moritz Muehlenhoff
<jmm@debian.org> wrote:
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package libav. It fixes multiple security issues:
CVE-2012-2772
CVE-2012-2775
CVE-2012-2776
CVE-2012-2777
CVE-2012-2779
CVE-2012-2784
CVE-2012-2786
CVE-2012-2787
CVE-2012-2788
CVE-2012-2789
CVE-2012-2790
CVE-2012-2793
CVE-2012-2794
CVE-2012-2796
CVE-2012-2798
CVE-2012-2800
CVE-2012-2801
CVE-2012-2802
We also used to ship the libav/ffmpeg micro releases in stable-security
for Squeeze.
unblock libav/6:0.8.4-1
As maintainer of the package, I strongly support this unblock request. The patches have been very conservatively chosen to minimize the risk of regressions. In general, I found it very hard to tell what of the issues were security relevant and what not, which explain why it took me so much time to get the release done.
If you have any further questions, do not hesitate to ask!