CVE-2014-4610: Integer Overflow in FFmpeg LZO implementation

[Andreas Cadhalpun <andreas.cadhalpun@googlemail.com>]

Hi,

I'd like to inform you that ffmpeg 0.5.10-1 in squeeze is vulnerable to 
CVE-2014-4610 [1].
The fix [2] should be easily backportable.

Best regards,
Andreas


1: http://seclists.org/oss-sec/2014/q2/668
2: 
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d6af26c55c1ea30f85a7d9edbc373f53be1743ee