Publishing details
Changelog
libebml (1.3.5-2ubuntu0.1) bionic-security; urgency=medium
* SECURITY UPDATE: heap-based out of bounds read
- debian/patches/CVE-2019-13615-1.patch: check the max size to read
before actually reading in src/EbmlElement.cpp.
- debian/patches/CVE-2019-13615-2.patch: do not output an element with
size Unknown if it's not allowed in src/EbmlElement.cpp.
- debian/patches/CVE-2019-13615-3.patch: exit the max size loop when
there's nothing left possible to find in src/EbmlElement.cpp.
- debian/patches/CVE-2019-13615-4.patch: rework the way we look at the
end boundary when looking an element in a parent in
src/EbmlElement.cpp.
- CVE-2019-13615
-- Marc Deslauriers <email address hidden> Wed, 24 Jul 2019 13:32:41 -0400
Builds
Built packages
-
libebml-dev
access library for the EBML format (development files)
-
libebml4v5
access library for the EBML format (shared library)
-
libebml4v5-dbgsym
debug symbols for libebml4v5
Package files