-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 5 Sep 2023 23:47:54 CEST Source: aom Architecture: source Version: 1.0.0-3+deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: 9bc0c43ec2f4ae9c3d49ee15cffbe204b89eeaa2 2335 aom_1.0.0-3+deb10u1.dsc b714a5117f48e9f979498e2726467c4beba06735 1896516 aom_1.0.0.orig.tar.xz a9df5352f3f32869f160c89f1be8eb6204ea3398 24664 aom_1.0.0-3+deb10u1.debian.tar.xz 0fa5b9e27657b9e4f2b166939f7119756cfc78e5 8368 aom_1.0.0-3+deb10u1_amd64.buildinfo Checksums-Sha256: 5f2e3145a154397766995a9e30404acc06eba1d217f58bc7c0edd8477f1bf17b 2335 aom_1.0.0-3+deb10u1.dsc 4319eb3ef38abfabfdb3037cc3a7a47804ed5f58c96576876bbe0ac2a25bbcc6 1896516 aom_1.0.0.orig.tar.xz f9d8938433c08d2525ea901322fd2ae801507586ea74d47debed04fe754c9485 24664 aom_1.0.0-3+deb10u1.debian.tar.xz 2a08a3c389d797668b76257b839bc22c052479b025a0f0a7ed41470be8339b10 8368 aom_1.0.0-3+deb10u1_amd64.buildinfo Changes: aom (1.0.0-3+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2020-36130, CVE-2020-36131, CVE-2020-36133, CVE-2020-36135, CVE-2021-30473, CVE-2021-30474 and CVE-2021-30475. Multiple security vulnerabilities have been discovered in aom, the AV1 Video Codec Library. Buffer overflows, use-after-free and NULL pointer dereferences may cause a denial of service or other unspecified impact if a malformed multimedia file is processed. Files: 45361dc80978591b22963484153f87da 2335 video optional aom_1.0.0-3+deb10u1.dsc 5dee2790ad0bcb6203b89066d8d2e840 1896516 video optional aom_1.0.0.orig.tar.xz f1c0cfd6ac77948dddafab6b611dbe85 24664 video optional aom_1.0.0-3+deb10u1.debian.tar.xz 49d882513e95fb2c349b7e7684c7eb52 8368 video optional aom_1.0.0-3+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmT3ojtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkwBgQAMsVYoAY8inFFLNZ32QcqaQ8mqX+QtUL4+HF wTSGRQX5YdnRAxJ3MO6L2CGowKdK0n7yye+0pN9hP63GE1xkSEt/M42sZ+kqWOW9 4ViHkfjyWOSNAw7z1iFCeuHX+55DoE8YSsH+cyVjI/4qa6WI3xyn/bbamAvexewh 4RPKfZL/GfebXyPO9vB1Beq85FdFG3UTzZbhSgBQuk5T9Nw+gnCADXbRZ8s4qV9g hRJlbQ0pVNnArP4Gp027l+FU6TMO7eYTSAE2RIZMwihbDZW0Ck2ELrwkFVFTdYHl o6AT0YzVdMt8E6wVQiudaISu+aDLwFOHRdLM2YePstJ3tG+BuuQ8jl22buCInCO3 ImitF/wF19mYmPoKRu5pyPUFaGBHCvcxgBIm9RnXFJ3vDj48cttINAkYEhFErtyi EoC+Mb/JzWddIsypfKb6qPU47Xh0J+eu84a+8AQwkyceiFbVTXbopJsa0Y6JI9f4 RY1Z9gO2Ilyx6r+x8PJeiF32pvmKx4lAY5WXvJy4P8oQmwLaZQnD3SitnjhmByjb PQD6I/9Bh97f4qG8sk88wtYoOh5/nLf/yH4YU2YQpA+nWEpWRT7qIsYNtMVwkWm6 rGdcQCMBpAUcPi+sOz1LhJ2Y+uwxoB+1o6zWxSsW6Tt4JuoIyapB0QVLpf7rRxWG n2u0rPTf =7l6j -----END PGP SIGNATURE-----
