diff options
Diffstat (limited to 'metadata/glsa/glsa-201210-06.xml')
| -rw-r--r-- | metadata/glsa/glsa-201210-06.xml | 67 |
1 files changed, 67 insertions, 0 deletions
diff --git a/metadata/glsa/glsa-201210-06.xml b/metadata/glsa/glsa-201210-06.xml new file mode 100644 index 000000000000..3a59ad0673d0 --- /dev/null +++ b/metadata/glsa/glsa-201210-06.xml @@ -0,0 +1,67 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> +<glsa id="201210-06"> + <title>Libav: Multiple vulnerabilities</title> + <synopsis>Multiple vulnerabilities have been found in Libav, allowing + attackers to execute arbitrary code or cause Denial of Service. + </synopsis> + <product type="ebuild">libav</product> + <announced>October 20, 2012</announced> + <revised>October 20, 2012: 1</revised> + <bug>408555</bug> + <bug>422537</bug> + <access>remote</access> + <affected> + <package name="media-video/libav" auto="yes" arch="*"> + <unaffected range="ge">0.8.3</unaffected> + <vulnerable range="lt">0.8.3</vulnerable> + </package> + </affected> + <background> + <p>Libav is a complete solution to record, convert and stream audio and + video. + </p> + </background> + <description> + <p>Multiple vulnerabilities have been discovered in Libav. Please review + the CVE identifiers referenced below for details. + </p> + </description> + <impact type="normal"> + <p>A remote attacker could entice a user to open a specially crafted media + file in an application linked against Libav, possibly resulting in + execution of arbitrary code with the privileges of the application or a + Denial of Service condition. + </p> + </impact> + <workaround> + <p>There is no known workaround at this time.</p> + </workaround> + <resolution> + <p>All Libav users should upgrade to the latest version:</p> + + <code> + # emerge --sync + # emerge --ask --oneshot --verbose ">=media-video/libav-0.8.3" + </code> + </resolution> + <references> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3929">CVE-2011-3929</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3936">CVE-2011-3936</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3937">CVE-2011-3937</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3937">CVE-2011-3937</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3940">CVE-2011-3940</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3945">CVE-2011-3945</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3947">CVE-2011-3947</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3951">CVE-2011-3951</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3952">CVE-2011-3952</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0848">CVE-2012-0848</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0851">CVE-2012-0851</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0852">CVE-2012-0852</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0853">CVE-2012-0853</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0858">CVE-2012-0858</uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0947">CVE-2012-0947</uri> + </references> + <metadata tag="requester" timestamp="Tue, 01 May 2012 20:28:38 +0000">ackle</metadata> + <metadata tag="submitter" timestamp="Sat, 20 Oct 2012 00:14:06 +0000">ackle</metadata> +</glsa> |