-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Feb 2019 16:47:01 +0100 Source: liblivemedia Binary: liblivemedia-dev libbasicusageenvironment0 libgroupsock1 liblivemedia23 libusageenvironment1 livemedia-utils Architecture: source amd64 Version: 2014.01.13-1+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Description: libbasicusageenvironment0 - multimedia RTSP streaming library (BasicUsageEnvironment class) libgroupsock1 - multimedia RTSP streaming library (network interfaces and sockets liblivemedia-dev - multimedia RTSP streaming library (development files) liblivemedia23 - multimedia RTSP streaming library libusageenvironment1 - multimedia RTSP streaming library (UsageEnvironment classes) livemedia-utils - multimedia RTSP streaming tools Changes: liblivemedia (2014.01.13-1+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-7314: use-after-free during RTSP stream termination. * CVE-2019-6256: denial of service when processing get and post with identical x-session-cookie within the same tcp session. Checksums-Sha1: eb6c1e345367d251431b0a91e6be809db23c99e0 2139 liblivemedia_2014.01.13-1+deb8u2.dsc 86b5eb875033cc007f1f88c462bb0ab0c078f70f 11428 liblivemedia_2014.01.13-1+deb8u2.debian.tar.xz 0367dd5f01c118e339355cf60b20c7e57f713f2a 677956 liblivemedia-dev_2014.01.13-1+deb8u2_amd64.deb fce3b7746406b452328d453f178d3adc3bdcea48 21206 libbasicusageenvironment0_2014.01.13-1+deb8u2_amd64.deb 2787cbd30f845c6e23e0f1b15f06fceb4e25a38f 27062 libgroupsock1_2014.01.13-1+deb8u2_amd64.deb 128b5013e2a232966f35bdad9a4c414ce452f379 288518 liblivemedia23_2014.01.13-1+deb8u2_amd64.deb 76aba198144203504a1298cedee94bd363baabe3 11898 libusageenvironment1_2014.01.13-1+deb8u2_amd64.deb 4476c99f72c9b39c7545d1f88fae20b419ab8134 60388 livemedia-utils_2014.01.13-1+deb8u2_amd64.deb Checksums-Sha256: fe5e7ed3c4d561a5ea8238d0240687c6b1df2568c3c2b65f42feddab8d4afa71 2139 liblivemedia_2014.01.13-1+deb8u2.dsc a9156d0533d7a3da760027bd63aba002f39df15ea8d7e1c0a4efa42f38b61a3a 11428 liblivemedia_2014.01.13-1+deb8u2.debian.tar.xz 9917457d5edc79d3b0498a4f392da941c05e5731200779ae64991804b3b2aa4b 677956 liblivemedia-dev_2014.01.13-1+deb8u2_amd64.deb 453995e1f50747766c4ff3c7050dae77f9b0164d4c8e3f987ab34aebfb6b9429 21206 libbasicusageenvironment0_2014.01.13-1+deb8u2_amd64.deb c506fa21644375b1e9d38676e6f53ba69a2c93cd9a8b2554c881c424fad488cf 27062 libgroupsock1_2014.01.13-1+deb8u2_amd64.deb 3ed09b40f8f5cb3f440e0ef07cff440f1f1be71ae64fc2f22a611a387adde75c 288518 liblivemedia23_2014.01.13-1+deb8u2_amd64.deb 778d2d39c42b8e25c700d7272fa3822b3b5e9026cb960d8cd3a289a20da2c723 11898 libusageenvironment1_2014.01.13-1+deb8u2_amd64.deb 962074460d1265277f47bf08e28a650c17231b9cceb271e4b5450b5c5a770fdb 60388 livemedia-utils_2014.01.13-1+deb8u2_amd64.deb Files: d727cc67b08149390ceabe35278cf1a8 2139 libs optional liblivemedia_2014.01.13-1+deb8u2.dsc b4cdce8ea428c4fe3d2ca7d33371ca95 11428 libs optional liblivemedia_2014.01.13-1+deb8u2.debian.tar.xz 2aa01bf7ada2f6d620cf941027eca6c6 677956 libdevel optional liblivemedia-dev_2014.01.13-1+deb8u2_amd64.deb cc8109180c871e83926f7024178c4de0 21206 libs optional libbasicusageenvironment0_2014.01.13-1+deb8u2_amd64.deb 648fd2f44c9231f81f607e10bca0e4fe 27062 libs optional libgroupsock1_2014.01.13-1+deb8u2_amd64.deb 8a901fbfbf450b94e3e73df4cc7a7fae 288518 libs optional liblivemedia23_2014.01.13-1+deb8u2_amd64.deb aa71e23ed41a3ab0c8e07b4653217d2b 11898 libs optional libusageenvironment1_2014.01.13-1+deb8u2_amd64.deb e3e165e049368eb129684588145fd3d2 60388 net optional livemedia-utils_2014.01.13-1+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEUFZhdgIWqBhwqCvuZYVUZx9w0DQFAlx0HOoACgkQZYVUZx9w 0DRuowf+O5FObjHfYn+tK/fikr6hZRKCYoVV/+3SLgpGclZlG7Kph96yf/kxQIpv hejAG7EAqhmu7nHcjSvrGHHp/VIj5ujOWrkrgZrh8Xu7naWk3vxYQ2SLIFOU3z0Z jNCk9c+N7WRxuB0P0ayLByk6R9SHiI4IxD7xMcXcIVzbMamwt+LGkKRMRBhNKWhU Zm6F4/jV8zK/riw/hhmDqg7UrJWpZum+6pT1JCjQv66V4YZDQCzm+28lkhrqtb95 RCmq+hwdz7iACaPLwkAhC/ToF1vxFGIKDFyJLdtLYa6l07LQBCXxU700MLgeLvcw CPj7AJY6liEJnc5OQmswPXOd+JdYZA== =CJ/v -----END PGP SIGNATURE-----