diff --git a/Changelog b/Changelog index 576eeb8b5f..edf3213c30 100644 --- a/Changelog +++ b/Changelog @@ -17,6 +17,7 @@ version 0.8.6: - lzo: fix overflow checking in copy_backptr() - matroskadec: request a read buffer for the wav header - mp3: exit on parsing error in mp_decode_frame +- msrledec: convert to bytestream2 API and add proper bounds checking (CVE-2013-2496) - oggdec: make sure the private parse data is cleaned up - parser: fix large overreads - png: use av_mallocz_array() for the zlib zalloc function, avoids accessing uninitialized memory @@ -31,6 +32,7 @@ version 0.8.6: - wmaprodec: return an error, not 0, when the input is too small - xxan: fix invalid memory access in xan_decode_frame_type0() + version 0.8.5: - Several bugs and crashes have been fixed in the following codecs: