Bug#624339: Memory corruption in AMV decoder

[Moritz Muehlenhoff]

Package: libav
Severity: grave
Tags: security

The following was reported to Bugtraq:
http://seclists.org/bugtraq/2011/Apr/257 (No CVE yet)

The ffmpeg commit 
http://git.videolan.org/?p=ffmpeg.git;a=commit;h=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32

isn't yet in libav git. Reinhard, can you pull the strings to get
it merged? (IIRC you're involved in libav)

(As for ffmpeg/squeeze and ffmpeg/lenny, I'm unsure about the status,
since there's already a pending (ticket update owned by Guiseppe))

Cheers,
        Moritz

-- System Information:
Debian Release: 5.0.1
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.32-ucs37-amd64
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)