[IT-SecNots] [SECURITY] [DSA 4408-1] liblivemedia security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4408-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 17, 2019                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : liblivemedia
CVE ID         : CVE-2019-6256 CVE-2019-7314 CVE-2019-9215

Multiple security issues were discovered in liveMedia, a set of C++
libraries for multimedia streaming which could result in the execution
of arbitrary code or denial of service when parsing a malformed RTSP
stream.
                      
For the stable distribution (stretch), these problems have been fixed in
version 2016.11.28-1+deb9u2.

We recommend that you upgrade your liblivemedia packages.

For the detailed security status of liblivemedia please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/liblivemedia

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Uvvh
-----END PGP SIGNATURE-----