Libav: Multiple vulnerabilities Multiple vulnerabilities have been found in Libav, allowing attackers to execute arbitrary code or cause Denial of Service. libav February 07, 2015 February 07, 2015: 1 492582 515234 531832 remote 9.17 9.17

Libav is a complete solution to record, convert and stream audio and video.

Multiple vulnerabilities have been discovered in Libav. Please review the CVE identifiers referenced below for details.

A remote attacker could entice a user to open a specially crafted media file in an application linked against Libav, possibly resulting in execution of arbitrary code with the privileges of the application or a Denial of Service condition.

There is no known workaround at this time.

All Libav users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/libav-9.17" CVE-2011-3934 CVE-2011-3935 CVE-2011-3946 CVE-2013-0848 CVE-2013-0851 CVE-2013-0852 CVE-2013-0860 CVE-2013-0868 CVE-2013-3672 CVE-2013-3674 CVE-2014-4609 Libav News November 2, 2013 BlueKnight ackle