This update for libquicktime fixes the following issues:
Security issues fixed: - CVE-2017-9122: A DoS in quicktimereadmoov function in moov.c via a crafted mp4 file was fixed. (bsc#1044077) - CVE-2017-9123: An invalid memory read in lqtframeduration via a crafted mp4 file was fixed. (bsc#1044009) - CVE-2017-9124: A NULL pointer dereference in quicktimematch32 via a crafted mp4 file was fixed. (bsc#1044008) - CVE-2017-9125: A DoS in lqtframeduration function in lqtquicktime.c via crafted mp4 file was fixed. (bsc#1044122) - CVE-2017-9126: A heap-based buffer overflow in quicktimereaddreftable via a crafted mp4 file was fixed. (bsc#1044006) - CVE-2017-9127: A heap-based buffer overflow in quicktimeuseratomsreadatom via a crafted mp4 file was fixed. (bsc#1044002) - CVE-2017-9128: A heap-based buffer over-read in quicktimevideowidth via a crafted mp4 file was fixed. (bsc#1044000) - CVE-2016-2399: Adjust fix to prevent endless loop when there are less than 256 bytes to read. (bsc#1022805)