libvpx (1.12.0-1ubuntu2) mantic; urgency=medium
* SECURITY UPDATE: Heap buffer overflow in vp8 encoding
- debian/patches/CVE-2023-5217-1.patch: add ConfigResizeChangeThreadCount
to test/encode_api_test.cc.
- debian/patches/CVE-2023-5217-2.patch: disallow thread count changes
in test/encode_api_test.cc, vp8/encoder/onyx_if.c.
- CVE-2023-5217
* SECURITY UPDATE: Width mishandling in vp9 encoding
- debian/patches/CVE-2023-44488.patch: fix bug with smaller width
bigger size in test/resize_test.cc, vp9/common/vp9_alloccommon.c,
vp9/encoder/vp9_encoder.c.
- CVE-2023-44488
-- Marc Deslauriers <email address hidden> Mon, 02 Oct 2023 06:43:10 -0400