Publishing details

• Published on 2019-11-25
• Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

libvpx (1.7.0-3ubuntu0.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: double free in ParseContentEncodingEntry
    - debian/patches/CVE-2019-2126.patch: set compression_entries_ to NULL
      in third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-2126
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9232.patch: use unsigned char in
      vp8/decoder/dboolhuff.h, vpx_dsp/bitreader.h.
    - CVE-2019-9232
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9325.patch: fix size in vp9/vp9_dx_iface.c,
      vpx_dsp/bitreader_buffer.c, test/decode_api_test.cc.
    - CVE-2019-9325
  * SECURITY UPDATE: resource exhaustion issue
    - debian/patches/CVE-2019-9371-1.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - debian/patches/CVE-2019-9371-2.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-9371
  * SECURITY UPDATE: memory disclosure issue
    - debian/patches/CVE-2019-9433.patch: fix use-after-free in
      vp8/common/postproc.c.
    - CVE-2019-9433

 -- Marc Deslauriers <email address hidden>  Tue, 19 Nov 2019 10:48:25 -0500

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Built packages

• libvpx-dev VP8 and VP9 video codec (development files)

• libvpx-doc VP8 and VP9 video codec (API documentation)

• libvpx5 VP8 and VP9 video codec (shared library)

• libvpx5-dbgsym debug symbols for libvpx5

• vpx-tools VP8 and VP9 video codec encoding/decoding tools

• vpx-tools-dbgsym debug symbols for vpx-tools

Package files

• libvpx-dev_1.7.0-3ubuntu0.18.04.1_amd64.deb (910.1 KiB)
• libvpx-dev_1.7.0-3ubuntu0.18.04.1_arm64.deb (796.8 KiB)
• libvpx-dev_1.7.0-3ubuntu0.18.04.1_armhf.deb (559.1 KiB)
• libvpx-dev_1.7.0-3ubuntu0.18.04.1_i386.deb (878.7 KiB)
• libvpx-dev_1.7.0-3ubuntu0.18.04.1_ppc64el.deb (762.2 KiB)
• libvpx-dev_1.7.0-3ubuntu0.18.04.1_s390x.deb (824.5 KiB)
• libvpx-doc_1.7.0-3ubuntu0.18.04.1_all.deb (243.6 KiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_amd64.ddeb (3.2 MiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_arm64.ddeb (3.1 MiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_armhf.ddeb (2.0 MiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_i386.ddeb (3.0 MiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_ppc64el.ddeb (2.4 MiB)
• libvpx5-dbgsym_1.7.0-3ubuntu0.18.04.1_s390x.ddeb (2.8 MiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_amd64.deb (777.0 KiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_arm64.deb (658.3 KiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_armhf.deb (438.7 KiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_i386.deb (729.2 KiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_ppc64el.deb (627.8 KiB)
• libvpx5_1.7.0-3ubuntu0.18.04.1_s390x.deb (711.3 KiB)
• libvpx_1.7.0-3ubuntu0.18.04.1.debian.tar.xz (15.5 KiB)
• libvpx_1.7.0-3ubuntu0.18.04.1.dsc (2.3 KiB)
• libvpx_1.7.0.orig.tar.gz (2.6 MiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_amd64.ddeb (1.1 MiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_arm64.ddeb (1.1 MiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_armhf.ddeb (888.1 KiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_i386.ddeb (842.8 KiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_ppc64el.ddeb (1.1 MiB)
• vpx-tools-dbgsym_1.7.0-3ubuntu0.18.04.1_s390x.ddeb (979.4 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_amd64.deb (236.4 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_arm64.deb (196.4 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_armhf.deb (116.9 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_i386.deb (162.4 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_ppc64el.deb (237.5 KiB)
• vpx-tools_1.7.0-3ubuntu0.18.04.1_s390x.deb (131.8 KiB)