-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 04 Aug 2026 16:49:18 +0800
Source: aom
Architecture: source
Version: 3.12.1-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Changes:
aom (3.12.1-1+deb13u1) trixie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Backport upstream security fixes for four encoder vulnerabilities.
- debian/patches/0004-CVE-2026-56209-56210-56211-svc-layer-id-bounds-check.patch:
Validate the spatial and temporal layer ids passed to the
AOME_SET_SPATIAL_LAYER_ID and AV1E_SET_SVC_LAYER_ID codec controls
against the configured number of layers.
Fixes: CVE-2026-56210, CVE-2026-56209 and CVE-2026-56211.
- debian/patches/0005-CVE-2026-56208-lap-stats-buffer-overflow.patch:
Size the first-pass stats buffer to at least MAX_GF_LENGTH_LAP + 1, use
a compacting sliding window in Look-Ahead Processing mode and correct an
off-by-one in the rest_frames computation, fixing an out-of-bounds
access to the first-pass stats array triggered by a small
g_lag_in_frames (CVE-2026-56208).
* debian/patches/0006-svc-add-more-spatial-temporal-layer-validation.patch:
Reject SVC spatial and temporal layer counts outside the supported range
in AOME_SET_NUMBER_SPATIAL_LAYERS and AV1E_SET_SVC_PARAMS, and report an
invalid parameter rather than relying on an assert() for the fixed-SVC
layer count limit. This is a pre-existing out-of-bounds access in 3.12.1,
included here because the layer id validation added above derives its
bounds from these counts.
Checksums-Sha1:
be85096889d48eb97462524f18f9c046c25729af 2235 aom_3.12.1-1+deb13u1.dsc
5d7456b7667f65fa125dd61de72d95beaa939bb3 5504164 aom_3.12.1.orig.tar.gz
cb8939889a100b53076fdc0ad6b266e4e2e3685e 24788 aom_3.12.1-1+deb13u1.debian.tar.xz
8d5ececc825043c6fa7e792b9508a4a6af26c150 13012 aom_3.12.1-1+deb13u1_source.buildinfo
Checksums-Sha256:
796b09717499ced9d82820fad950a31532d7c193a2a764617df05c9aa68090cb 2235 aom_3.12.1-1+deb13u1.dsc
40c929a41b2a59c24319a699c358351422829b3ae646de31b18cbabed0191962 5504164 aom_3.12.1.orig.tar.gz
e94efe3356d69b0056dd95746f3cf29551130766b3f3503365e40e9d1c8f8ee7 24788 aom_3.12.1-1+deb13u1.debian.tar.xz
c945ffeca48611ca0c862f27bbff140568caf82a8d3b285b626264b699f74785 13012 aom_3.12.1-1+deb13u1_source.buildinfo
Files:
fc13233fe724e8c7fc8380c81baadf5b 2235 video optional aom_3.12.1-1+deb13u1.dsc
02eb02915fa1d46a21dddf632bb04134 5504164 video optional aom_3.12.1.orig.tar.gz
a84b5541d6dc6e39c039678b0df17bba 24788 video optional aom_3.12.1-1+deb13u1.debian.tar.xz
55b5afe66d7a19b718923e50c823c42d 13012 video optional aom_3.12.1-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmpxugEACgkQ+GQ1dHE8
m66D3Qf/c8OPlOuSmrlM8MBHp52/HIJeK+VY5WyEB5X9eumhn3qbPZumLr+E6/Yt
0H5prh2rNAM6VBTO0LvzcJJ4niE22C/yMlwxgNJRR3Hs18GxLAl/rBS03OO/uTI+
gnOJAB2lzCRgJX2V++AqbvYflgsuKDuZ8zIlRcweh1iMZsS2DVdgAY3Sx97+UydM
0wg8jbLWv+tTlVZaoystMfBhdTTQJ8StJjoD4jlF/vyT5kTUb8ndZvPU75pmiw9I
T5YWBcf8BF3OUzqiQj5Y+/7fGurpctcSm0j+arxLMSr+g3e/LgH7N65811HGc0Cf
JF2ESkV2nULFFnV+m83SEcoEq9K0aQ==
=xXtR
-----END PGP SIGNATURE-----
