[libav-announce] Libav 9.7 Announcement

Derek Buitenhuis derek.buitenhuis at gmail.com
Sat Jun 22 23:08:26 CEST 2013


We are pleased to announce the immediate availability of Libav 9.7.

Download URLs:
http://libav.org/releases/libav-9.7.tar.gz
http://libav.org/releases/libav-9.7.tar.xz

Signature URLs:
http://libav.org/releases/libav-9.7.tar.gz.asc
http://libav.org/releases/libav-9.7.tar.xz.asc

Most of the following fixes resulted from test samples that the Google
Security Team has kindly made available to us:

- 4xm: fix several programming errors to avoid crashes, etc.
- apetag: use int64_t for filesize
- jpegls: Fix invalid writes to memory
- ljpeg: use the correct number of components in YUV
- mjpeg: Validate sampling factors
- mjpegdec: properly report unsupported disabled features
- mjpegdec: validate parameters in mjpeg_decode_scan_progressive_ac
- mpegvideo: allocate sufficiently large scratch buffer for interlaced vid
- pixdesc: mark gray8 as pseudopal
- smacker: fix several programming errors to avoid crashes, etc.
- tiff: do not overread the source buffer
- vmd: drop incomplete chunks and spurious samples
- vmdav: convert to bytestream2 to avoid invalid reads and writes
- wavpack: check packet size early
- wavpack: use bytestream2 in wavpack_decode_block
- wavpack: validate samples size parsed in wavpack_decode_block

- Derek and Reinhard


More information about the libav-announce mailing list