Libav Vulnerabilities Fixed in Multiple Ubuntu OSes

Users can just upgrade the system in order to fix the problem

  Ubuntu 12.10 desktop
On January 28, in a security notice Canonical published details about Libav vulnerabilities for its Ubuntu 12.10, Ubuntu 12.04 LTS, and Ubuntu 11.10 operating systems.

On January 28, in a security notice Canonical published details about Libav vulnerabilities for its Ubuntu 12.10, Ubuntu 12.04 LTS, and Ubuntu 11.10 operating systems.

According to Canonical, Libav could be made to crash or run programs as the user's login, if it opened a specially crafted file.

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.

For a more detailed description of the security problems, you can visit Canonical's security notification.

Users can simply fix the security flaws by upgrading the operating systems to the libavformat53 and libavcodec53 specific to each distribution.

A normal system update, executed with the Update Manager, will implement all the necessary changes. A complete system restart is not necessary.

Comments