UbuntuUpdates.org

Package "vpx-tools"

Name: vpx-tools

Description:

VP8 and VP9 video codec encoding/decoding tools
Latest version: 1.7.0-3ubuntu0.18.04.1
Release: bionic (18.04)
Level: security
Repository: universe
Head package: libvpx
Homepage: http://www.webmproject.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "vpx-tools"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "vpx-tools" in Bionic

Repository Area Version
base universe 1.7.0-3
updates universe 1.7.0-3ubuntu0.18.04.1

Changelog

Version: 1.7.0-3ubuntu0.18.04.1 2019-11-25 14:06:30 UTC

  libvpx (1.7.0-3ubuntu0.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: double free in ParseContentEncodingEntry
    - debian/patches/CVE-2019-2126.patch: set compression_entries_ to NULL
      in third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-2126
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9232.patch: use unsigned char in
      vp8/decoder/dboolhuff.h, vpx_dsp/bitreader.h.
    - CVE-2019-9232
  * SECURITY UPDATE: out of bounds read
    - debian/patches/CVE-2019-9325.patch: fix size in vp9/vp9_dx_iface.c,
      vpx_dsp/bitreader_buffer.c, test/decode_api_test.cc.
    - CVE-2019-9325
  * SECURITY UPDATE: resource exhaustion issue
    - debian/patches/CVE-2019-9371-1.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - debian/patches/CVE-2019-9371-2.patch: fix logic in
      third_party/libwebm/mkvparser/mkvparser.cc.
    - CVE-2019-9371
  * SECURITY UPDATE: memory disclosure issue
    - debian/patches/CVE-2019-9433.patch: fix use-after-free in
      vp8/common/postproc.c.
    - CVE-2019-9433

 -- Marc Deslauriers <email address hidden> Tue, 19 Nov 2019 10:48:25 -0500
CVE-2019-2126 In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote co
CVE-2019-9232 In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional
CVE-2019-9325 In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional
CVE-2019-9371 In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional e
CVE-2019-9433 In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no addi


About   -   Send Feedback to @ubuntu_updates