UbuntuUpdates.org

Package "zvbi"

Name: zvbi

Description:

Vertical Blanking Interval (VBI) utilities

Latest version: 0.2.42-2ubuntu0.24.10.2
Release: oracular (24.10)
Level: updates
Repository: universe
Homepage: https://github.com/zapping-vbi/zvbi

Links


Download "zvbi"


Other versions of "zvbi" in Oracular

Repository Area Version
base universe 0.2.42-2
security universe 0.2.42-2ubuntu0.24.10.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.2.42-2ubuntu0.24.10.2 2025-03-24 21:07:00 UTC

  zvbi (0.2.42-2ubuntu0.24.10.2) oracular-security; urgency=medium

  * SECURITY UPDATE: Integer overflow leading to heap overflow.
    - debian/patches/CVE-2025-217x.patch: Extend buffer and malloc checks in
      src/conv.c, src/io-sim.c, and src/search.c.
    - CVE-2025-2173
    - CVE-2025-2174
    - CVE-2025-2175
    - CVE-2025-2176
    - CVE-2025-2177
  * Disable building with LTO to prevent FTBFS.
    - debian/rules: add optimize=-lto to DEB_BUILD_MAINT_OPTIONS.

 -- Hlib Korzhynskyy <email address hidden> Tue, 18 Mar 2025 16:39:12 -0230

CVE-2025-2173 A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file
CVE-2025-2174 A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_ic
CVE-2025-2175 A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The m
CVE-2025-2176 A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src
CVE-2025-2177 A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/sear



About   -   Send Feedback to @ubuntu_updates