-
gst-plugins-base1.0 (1.20.1-1ubuntu0.1) jammy-security; urgency=medium
* SECURITY UPDATE: Heap overwrite in subtitle parsing
- debian/patches/CVE-2023-37328-1.patch: look for the closing > of a
tag after the opening < in gst/subparse/gstsubparse.c.
- debian/patches/CVE-2023-37328-2.patch: skip after the end of a valid
closing tag in gst/subparse/gstsubparse.c.
- CVE-2023-37328
* SECURITY UPDATE: Integer overflow leading to heap overwrite in FLAC
image tag handling
- debian/patches/CVE-2023-37327-2.patch: don't allow image tags with
G_MAXUINT32 length in gst-libs/gst/tag/tags.c.
- CVE-2023-37327
-- Marc Deslauriers <email address hidden> Tue, 01 Aug 2023 08:26:17 -0400
-
gst-plugins-base1.0 (1.20.1-1) unstable; urgency=medium
* New upstream bugfix release.
-- Sebastian Dröge <email address hidden> Mon, 14 Mar 2022 16:45:53 +0200
-
gst-plugins-base1.0 (1.20.0-2) unstable; urgency=medium
* debian/control:
+ Add libgudev-1.0-dev (>= 147) [linux-any] dependency to
libgstreamer-plugins-base1.0-dev (Closes: #1005120).
-- Sebastian Dröge <email address hidden> Tue, 08 Feb 2022 22:11:05 +0200
-
gst-plugins-base1.0 (1.20.0-1) unstable; urgency=medium
* New upstream release.
-- Sebastian Dröge <email address hidden> Fri, 04 Feb 2022 08:54:46 +0200
-
gst-plugins-base1.0 (1.19.90-1) experimental; urgency=medium
* New upstream release candidate.
-- Sebastian Dröge <email address hidden> Fri, 28 Jan 2022 17:00:15 +0200
-
gst-plugins-base1.0 (1.18.5-1) unstable; urgency=medium
* New upstream bugfix release.
-- Sebastian Dröge <email address hidden> Mon, 13 Sep 2021 09:34:54 +0300
