Ubuntu
gpac package

Change logs for gpac source package in Focal

  1. Focal (20.04)
  2. Change log 
  • gpac (0.5.2-426-gc5ad4e4+dfsg5-5) unstable; urgency=medium

  [ Moritz Muehlenhoff ]
  * Bug fix: "CVE-2019-11222: Buffer-overflow in gf_bin128_parse", thanks
    to Salvatore Bonaccorso (Closes: #926961).
  * Bug fix: "CVE-2019-11221: buffer-overflow issue in gf_import_message()
    in media_import.c", thanks to Salvatore Bonaccorso (Closes: #926963).

 -- Reinhard Tartler <email address hidden>  Sat, 13 Apr 2019 16:41:15 -0400
  • gpac (0.5.2-426-gc5ad4e4+dfsg5-4ubuntu1) disco; urgency=medium

  * SECURITY UPDATE: Fix multiple buffer overflow issues
    - debian/patches/CVE-2018-7752-CVE-2018-1000100.patch: fix buffer overflow
      in the gf_media_avc_read_sps.
    - debian/patches/CVE-2018-13005-CVE-2018-13006.patch: fixed 2 possible
      heap overflows.
    - debian/patches/CVE-2018-20760.patch: check error code on call to
      gf_utf8_wcstombs.
    - debian/patches/CVE-2018-20761-CVE-2018-20762.patch: fix some overflows
      due to strcpy.
    - debian/patches/CVE-2018-20763.patch: add some boundary checks on
      gf_text_get_utf8_line.
    - CVE-2018-7752
    - CVE-2018-13005
    - CVE-2018-13006
    - CVE-2018-20760
    - CVE-2018-20761
    - CVE-2018-20762
    - CVE-2018-20763
    - CVE-2018-1000100

 -- Paulo Flabiano Smorigo <email address hidden>  Wed, 10 Apr 2019 12:16:47 -0300