Format: 1.8 Date: Mon, 02 Oct 2023 06:43:10 -0400 Source: libvpx Binary: libvpx-dev libvpx7 vpx-tools Built-For-Profiles: noudeb Architecture: riscv64 Version: 1.11.0-2ubuntu2.2 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon <buildd@riscv64-qemu-lgw01-023.buildd> Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com> Description: libvpx-dev - VP8 and VP9 video codec (development files) libvpx7 - VP8 and VP9 video codec (shared library) vpx-tools - VP8 and VP9 video codec encoding/decoding tools Changes: libvpx (1.11.0-2ubuntu2.2) jammy-security; urgency=medium . * SECURITY UPDATE: Heap buffer overflow in vp8 encoding - debian/patches/CVE-2023-5217.patch: disallow thread count changes in vp8/encoder/onyx_if.c. - CVE-2023-5217 * SECURITY UPDATE: Width mishandling in vp9 encoding - debian/patches/CVE-2023-44488.patch: fix bug with smaller width bigger size in test/resize_test.cc, vp9/common/vp9_alloccommon.c, vp9/encoder/vp9_encoder.c. - CVE-2023-44488 Checksums-Sha1: 00dd9c0f25d17071ff438e0a8582868fafa32366 2691554 libvpx-dev_1.11.0-2ubuntu2.2_riscv64.deb ddcd100a57019d3fe84d607be57835fea93c3df7 2394568 libvpx7-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb 3e35a0a752710048581550ab2f6119377afc53a5 818676 libvpx7_1.11.0-2ubuntu2.2_riscv64.deb 806fba39f6054aafa3c6139c9f7493b887f556ba 6851 libvpx_1.11.0-2ubuntu2.2_riscv64.buildinfo d6b403edb19c493112c155eaadfe753f18042d6e 1071114 vpx-tools-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb bba0afd873aea4f323918cb3fb3f868634ce3a42 162574 vpx-tools_1.11.0-2ubuntu2.2_riscv64.deb Checksums-Sha256: 129cbd5f2f50d1dc1f9231b2477223786e310dbed26cfc45ef711ea66dd108ee 2691554 libvpx-dev_1.11.0-2ubuntu2.2_riscv64.deb 4635234107689f5c2d6efd1bf57a846129736a485a2cc56406bc80fbd76b2b53 2394568 libvpx7-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb 7254fcf530b8e155c0e135bbe824e73eca5b40b538018205958d5ba15bdf71f4 818676 libvpx7_1.11.0-2ubuntu2.2_riscv64.deb 202b6d22c956d83f3fbc362b76a32d8e8ca31bc364a7bf46d3d57ad028685df6 6851 libvpx_1.11.0-2ubuntu2.2_riscv64.buildinfo cc941e8063fc67a3e6f80b0aef16b83a69c888a9608e74d490236a86b3bd4cb0 1071114 vpx-tools-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb d65949b244cfc9ac2f0748c4f18a7df66b3de43af3fbe59a6c3c2c6b08d57f3f 162574 vpx-tools_1.11.0-2ubuntu2.2_riscv64.deb Files: 6bfd61c2bfa206dcfed116c02564c942 2691554 libdevel optional libvpx-dev_1.11.0-2ubuntu2.2_riscv64.deb 8c8e3a65c88b2e278ccaffb34b26770b 2394568 debug optional libvpx7-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb 0e3a0c3e9422bcdbbbc8083a192bca30 818676 libs optional libvpx7_1.11.0-2ubuntu2.2_riscv64.deb d31fd29b548683e81d76763eb1106cc7 6851 video optional libvpx_1.11.0-2ubuntu2.2_riscv64.buildinfo 05e612a3c1d8a3db98f5322162027419 1071114 debug optional vpx-tools-dbgsym_1.11.0-2ubuntu2.2_riscv64.ddeb 889b2f2e67e49279582975e7d1889bbe 162574 utils optional vpx-tools_1.11.0-2ubuntu2.2_riscv64.deb Original-Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>