Register | Log in

libdvdnav

Choose email to subscribe with

general

source: libdvdnav (main)
version: 7.0.0-2
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Reinhard Tartler [DMD] – Benjamin Drung [DMD] – Sebastian Ramacher [DMD]
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 6.1.0-1
oldstable: 6.1.1-1
stable: 6.1.1-3
testing: 7.0.0-2
unstable: 7.0.0-2

versioned links

6.1.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.1.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.1.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
7.0.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libdvdnav-dev
libdvdnav-doc
libdvdnav4

action needed

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2026-112057: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
CVE-2026-112058: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.

Created: 2026-10-18 Last update: 2026-10-19 05:00

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2026-112057: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
CVE-2026-112058: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.

Created: 2026-10-18 Last update: 2026-10-19 05:00

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2026-112057: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
CVE-2026-112058: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.

Created: 2026-10-18 Last update: 2026-10-19 05:00

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2026-112057: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than the title set's entries to crash applications enumerating chapters.
CVE-2026-112058: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title 0 or an oversized number, reading past the heap title table and crashing the player.

Created: 2026-10-18 Last update: 2026-10-19 05:00

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 6305321996f64672d470969d269eba6bac60c2b8
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Fri Jul 17 19:32:49 2026 +0200

    Bump Standards-Version

commit 8deef603673743be9f7d42faa78eaacbcc6742eb
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Fri Jul 17 19:27:37 2026 +0200

    Bump debhelper compat to 14

commit 6ded87f11fd59fe21af0a5a405afd2619725c45c
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Fri Jul 17 19:27:13 2026 +0200

    Drop Priority: optional

Created: 2026-07-17 Last update: 2026-10-27 00:02

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-03-31 15:01

news

[2025-12-14] libdvdnav 7.0.0-2 MIGRATED to testing (Debian testing watch)
[2025-12-08] Accepted libdvdnav 7.0.0-2 (source) into unstable (Sebastian Ramacher)
[2025-12-08] Accepted libdvdnav 7.0.0-1 (source) into unstable (Sebastian Ramacher)
[2024-04-26] libdvdnav 6.1.1-3 MIGRATED to testing (Debian testing watch)
[2024-03-14] Accepted libdvdnav 6.1.1-3 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-03-14] Accepted libdvdnav 6.1.1-2 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2021-08-26] libdvdnav 6.1.1-1 MIGRATED to testing (Debian testing watch)
[2021-08-26] libdvdnav 6.1.1-1 MIGRATED to testing (Debian testing watch)
[2021-08-20] Accepted libdvdnav 6.1.1-1 (source) into unstable (Sebastian Ramacher)
[2020-03-30] libdvdnav 6.1.0-1 MIGRATED to testing (Debian testing watch)
[2020-03-23] Accepted libdvdnav 6.1.0-1 (source) into unstable (Sebastian Ramacher)
[2019-11-09] libdvdnav 6.0.1-1 MIGRATED to testing (Debian testing watch)
[2019-11-03] Accepted libdvdnav 6.0.1-1 (source) into unstable (Sebastian Ramacher)
[2018-01-28] libdvdnav 6.0.0-1 MIGRATED to testing (Debian testing watch)
[2018-01-23] Accepted libdvdnav 6.0.0-1 (source) into unstable (Matteo F. Vescovi) (signed by: Sebastian Ramacher)
[2017-06-30] Accepted libdvdnav 5.0.1-1+deb8u1 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Matteo F. Vescovi)
[2017-01-05] libdvdnav 5.0.3-3 MIGRATED to testing (Debian testing watch)
[2016-12-25] Accepted libdvdnav 5.0.3-3 (source) into unstable (Benjamin Drung)
[2016-10-17] libdvdnav 5.0.3-2 MIGRATED to testing (Debian testing watch)
[2016-10-11] Accepted libdvdnav 5.0.3-2 (source) into unstable (Sebastian Ramacher)
[2015-09-05] libdvdnav 5.0.3-1 MIGRATED to testing (Britney)
[2015-08-30] Accepted libdvdnav 5.0.3-1 (source all) into unstable (Sebastian Ramacher)
[2015-05-27] libdvdnav 5.0.1-4 MIGRATED to testing (Britney)
[2015-05-21] Accepted libdvdnav 5.0.1-4 (source all) into unstable (Matteo F. Vescovi)
[2015-01-02] Accepted libdvdnav 5.0.1-3 (source all) into experimental (Matteo F. Vescovi)
[2014-12-31] Accepted libdvdnav 5.0.1-2 (source amd64 all) into experimental (Matteo F. Vescovi)
[2014-09-05] libdvdnav 5.0.1-1 MIGRATED to testing (Britney)
[2014-08-30] Accepted libdvdnav 5.0.1-1 (source amd64 all) into unstable (Benjamin Drung)
[2014-08-27] libdvdnav 5.0.0-1 MIGRATED to testing (Britney)
[2014-08-16] Accepted libdvdnav 5.0.0-1 (source amd64 all) into unstable (Reinhard Tartler)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 0
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 7.0.0-2
7 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing