Ubuntu
libvpx package

libvpx 1.7.0-3ubuntu0.19.04.1 source package in Ubuntu

Changelog

libvpx (1.7.0-3ubuntu0.19.04.1) disco-security; urgency=medium

  * SECURITY UPDATE: double free in ParseContentEncodingEntry
    - debian/patches/CVE-2019-2126.patch: set compression_entries_ to NULL
      in third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-2126
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9232.patch: use unsigned char in
      vp8/decoder/dboolhuff.h, vpx_dsp/bitreader.h.
    - CVE-2019-9232
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9325.patch: fix size in vp9/vp9_dx_iface.c,
      vpx_dsp/bitreader_buffer.c, test/decode_api_test.cc.
    - CVE-2019-9325
  * SECURITY UPDATE: resource exhaustion issue
    - debian/patches/CVE-2019-9371-1.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - debian/patches/CVE-2019-9371-2.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-9371
  * SECURITY UPDATE: memory disclosure issue
    - debian/patches/CVE-2019-9433.patch: fix use-after-free in
      vp8/common/postproc.c.
    - CVE-2019-9433

 -- Marc Deslauriers <email address hidden>  Tue, 19 Nov 2019 10:48:25 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
video
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvpx_1.7.0.orig.tar.gz 2.6 MiB 1fec931eb5c94279ad219a5b6e0202358e94a93a90cfb1603578c326abfc1238
libvpx_1.7.0-3ubuntu0.19.04.1.debian.tar.xz 15.5 KiB 92bf9e52277a8cddb008b44331362660bb8d2357e6da59579c45089885289f7b
libvpx_1.7.0-3ubuntu0.19.04.1.dsc 2.3 KiB 78c19f5482e2027f98c84597ca3cc2cdc9ffb89ba850db6378f4a634a5d841df

View changes file

Binary packages built by this source

libvpx-dev: No summary available for libvpx-dev in ubuntu disco.

No description available for libvpx-dev in ubuntu disco.

libvpx-doc: No summary available for libvpx-doc in ubuntu disco.

No description available for libvpx-doc in ubuntu disco.

libvpx5: No summary available for libvpx5 in ubuntu disco.

No description available for libvpx5 in ubuntu disco.

libvpx5-dbgsym: No summary available for libvpx5-dbgsym in ubuntu disco.

No description available for libvpx5-dbgsym in ubuntu disco.

vpx-tools: No summary available for vpx-tools in ubuntu disco.

No description available for vpx-tools in ubuntu disco.

vpx-tools-dbgsym: No summary available for vpx-tools-dbgsym in ubuntu disco.

No description available for vpx-tools-dbgsym in ubuntu disco.