-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Jan 2024 07:53:09 +0100 Source: gst-plugins-bad1.0 Architecture: source Version: 1.18.4-3+deb11u4 Distribution: bullseye-security Urgency: high Maintainer: Maintainers of GStreamer packages <gst-plugins-bad1.0@packages.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: gst-plugins-bad1.0 (1.18.4-3+deb11u4) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * av1parser: Fix potential stack overflow during tile list parsing (CVE-2024-0444) Checksums-Sha1: c6d4cfa72a0aa46137f22657d5f97308f3ced7a1 5791 gst-plugins-bad1.0_1.18.4-3+deb11u4.dsc 0c45395d4187f9c6cef52460aa74460d5c07b09e 37720 gst-plugins-bad1.0_1.18.4-3+deb11u4.debian.tar.xz 7aa797fd12391938e26c11f089dfce9f4f752f27 7610 gst-plugins-bad1.0_1.18.4-3+deb11u4_source.buildinfo Checksums-Sha256: f6ab4b6a81103585254ee68edbc1c354c8e859ae4188b0421986969725369f79 5791 gst-plugins-bad1.0_1.18.4-3+deb11u4.dsc ab6e9ce5438fa7f19b1910059ba5228a621813597645ce64ba20723b9690e4c6 37720 gst-plugins-bad1.0_1.18.4-3+deb11u4.debian.tar.xz fd2f535cabd818192c25ba8f3078725d3390d6f7691deaf3148b31180314000f 7610 gst-plugins-bad1.0_1.18.4-3+deb11u4_source.buildinfo Files: a31c4fdb305e7511f325231bf7bb3f9d 5791 libs optional gst-plugins-bad1.0_1.18.4-3+deb11u4.dsc 80e425938a04ac9e226f784c72921007 37720 libs optional gst-plugins-bad1.0_1.18.4-3+deb11u4.debian.tar.xz 2afbe754c8f00cdfdf6e15e2d50050b6 7610 libs optional gst-plugins-bad1.0_1.18.4-3+deb11u4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmW0sftfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ErK0P/0iL03NkiboxzrFqGAxNcWz1gLZFCNOH 6dCxMQDB5np7k2Dz2DhdZMuLYRIfSpedYfwsKvbXcqsgqL205ISj6Hc1tFpnE7DN 6EZT532SI3PG16aqLyiqmR9iQ/AnHHhdnjigARuZ0l0Y/+FIP7azb/IW9rGGqRlg wxipYh5e9dNSJt7d85+YKKtFnUeYn3UBru4azdoyEjTOiHC4qO6HsJT0cWruHGLJ kP8SIY2BvJm7y3tUQzZ3sCHBPLr3PdBopdX2+QkzqXortrL71QdtllM1VAfH4EWH VIfWYkR3LXNk/xGOyLBlC7kVISqThojCRt3mv/RbRZppvGNfYD3iNSWZVMHHqvGg JE+w5/r3XQogaW2eS3WeGUdiLDJsXtQjLzKwApsVXod7rH3NVaQKs4Suhb36SyCQ bHY38MRxgw+xIt4seuz/zvLdoY1ogc4B5UnLdPljpKeJg+12kh/G79emSFKjMLey HtyCkZDRE4AxcK53fejUVGMQJaXZViUfxDjNDeEtDU5is/GuD22CKOhdt/1STdIF bca82rWWpELyifud0oQGdNKleGDNxpxCOVsjcnT6dYBZejQ3/S2SFkwyvh6OGw3G AvgUaCaqwLgjjJrgFOgXFxPf9rBdEn5YCaDaktcz5XcOGFFm0Q2g4RN5Ak71sT2S FGoEJFnD/7u4 =vQYQ -----END PGP SIGNATURE-----