-
libvpx (1.12.0-1ubuntu2.1) mantic-security; urgency=medium
* SECURITY UPDATE: multiple integer overflows
- debian/patches/CVE-2024-5197-pre1.patch: add test/vpx_image_test.cc.
- debian/patches/CVE-2024-5197-1.patch: fix integer overflows in calc
of stride_in_bytes in test/vpx_image_test.cc, vpx/src/vpx_image.c.
- debian/patches/CVE-2024-5197-2.patch: avoid integer overflows in
arithmetic operations in test/vpx_image_test.cc, vpx/src/vpx_image.c,
vpx/vpx_image.h.
- debian/patches/CVE-2024-5197-3.patch: fix a bug in alloc_size for
high bit depths in vpx/src/vpx_image.c.
- CVE-2024-5197
-- Marc Deslauriers <email address hidden> Wed, 05 Jun 2024 09:58:51 -0400
-
libvpx (1.12.0-1ubuntu2) mantic; urgency=medium
* SECURITY UPDATE: Heap buffer overflow in vp8 encoding
- debian/patches/CVE-2023-5217-1.patch: add ConfigResizeChangeThreadCount
to test/encode_api_test.cc.
- debian/patches/CVE-2023-5217-2.patch: disallow thread count changes
in test/encode_api_test.cc, vp8/encoder/onyx_if.c.
- CVE-2023-5217
* SECURITY UPDATE: Width mishandling in vp9 encoding
- debian/patches/CVE-2023-44488.patch: fix bug with smaller width
bigger size in test/resize_test.cc, vp9/common/vp9_alloccommon.c,
vp9/encoder/vp9_encoder.c.
- CVE-2023-44488
-- Marc Deslauriers <email address hidden> Mon, 02 Oct 2023 06:43:10 -0400
-
libvpx (1.12.0-1ubuntu1) kinetic; urgency=medium
* Merge with Debian unstable (LP: #1987051). Remaining changes:
- d/rules: Disable LTO
libvpx (1.12.0-1) unstable; urgency=medium
* Team upload
* New upstream version 1.12.0
* debian/control: Bump Standards-Version
* debian/libvpx7.symbols: Bump minimal version of symbols doing version checks
-- Simon Chopin <email address hidden> Fri, 19 Aug 2022 10:59:05 +0200