libebml (1.3.3-1ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: heap-based out of bounds read - debian/patches/CVE-2019-13615-1.patch: check the max size to read before actually reading in src/EbmlElement.cpp. - debian/patches/CVE-2019-13615-2.patch: do not output an element with size Unknown if it's not allowed in src/EbmlElement.cpp. - debian/patches/CVE-2019-13615-3.patch: exit the max size loop when there's nothing left possible to find in src/EbmlElement.cpp. - debian/patches/CVE-2019-13615-4.patch: rework the way we look at the end boundary when looking an element in a parent in src/EbmlElement.cpp. - CVE-2019-13615 -- Marc Deslauriers Wed, 24 Jul 2019 14:03:37 -0400 libebml (1.3.3-1) unstable; urgency=medium * New upstream release -- Matteo F. Vescovi Wed, 21 Oct 2015 15:36:15 +0200 libebml (1.3.2-1) unstable; urgency=medium * New upstream release -- Matteo F. Vescovi Tue, 20 Oct 2015 09:34:12 +0200 libebml (1.3.1-5) unstable; urgency=medium * Team upload. * Upload to unstable. -- Sebastian Ramacher Tue, 04 Aug 2015 21:02:58 +0200 libebml (1.3.1-4) experimental; urgency=medium * Team upload. * Rename libebml4 for GCC 5 transition. -- Sebastian Ramacher Mon, 03 Aug 2015 22:26:59 +0200 libebml (1.3.1-3) unstable; urgency=medium * Upload to unstable -- Matteo F. Vescovi Mon, 27 Apr 2015 10:33:29 +0200 libebml (1.3.1-2) experimental; urgency=medium * debian/: pkg-config dependency added -- Matteo F. Vescovi Wed, 07 Jan 2015 17:57:19 +0100 libebml (1.3.1-1) experimental; urgency=medium * New upstream release * debian/copyright: DEP-5 compliance added * debian/rules: source directory parameter dropped * debian/rules: dh_auto_install stanza dropped * debian/control: Uploader e-mail address updated * debian/control: S-V bump 3.9.4 => 3.9.6 (no changes needed) -- Matteo F. Vescovi Wed, 07 Jan 2015 09:29:28 +0100 libebml (1.3.0-2) unstable; urgency=low * Upload to unstable (Closes: #720182) -- Matteo F. Vescovi Mon, 19 Aug 2013 15:48:15 +0200 libebml (1.3.0-1) experimental; urgency=low * New upstream release - debian/: SONAME bump libebml3 => libebml4 * debian/control: Standards-Version bumped to 3.9.4 * debian/control: Vcs-* URLs updated -- Matteo F. Vescovi Sat, 29 Jun 2013 15:04:57 +0200 # For older changelog entries, run 'apt-get changelog libebml4v5'