gst-plugins-good1.0 (1.8.3-1ubuntu0.5) xenial-security; urgency=medium

  * SECURITY UPDATE: Use after free
    - debian/patches/CVE-2021-3497.patch: Fix extraction of multichannel WavPack
      in gst/matroska/matroska-demux.c, gst/matroska/matroska-ids.h.
    - CVE-2021-3497

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Thu, 15 Apr 2021 13:46:46 -0300

gst-plugins-good1.0 (1.8.3-1ubuntu0.4) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS in gst_aac_parse_sink_setcaps
    - debian/patches/CVE-2016-10198.patch: make sure there's enough data in
      gst/audioparsers/gstaacparse.c.
    - CVE-2016-10198
  * SECURITY UPDATE: DoS in qtdemux_tag_add_str_full
    - debian/patches/CVE-2016-10199.patch: fix out of bounds read in
      gst/isomp4/qtdemux.c.
    - CVE-2016-10199
  * SECURITY UPDATE: DoS in qtdemux_parse_samples
    - debian/patches/CVE-2017-5840.patch: properly increment stts index in
      gst/isomp4/qtdemux.c.
    - CVE-2017-5840
  * SECURITY UPDATE: DoS in gst_avi_demux_parse_ncdt
    - debian/patches/CVE-2017-5841.patch: fix out of bounds reads in
      gst/avi/gstavidemux.c.
    - CVE-2017-5841
  * SECURITY UPDATE: DoS in gst_avi_demux_parse_ncdt
    - debian/patches/CVE-2017-5845.patch: check size in
      gst/avi/gstavidemux.c.
    - CVE-2017-5845

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 23 Mar 2017 10:23:46 -0400

gst-plugins-good1.0 (1.8.3-1ubuntu0.3) xenial; urgency=medium

  * Rebase on top of security update again.

 -- Iain Lane <iain.lane@canonical.com>  Fri, 13 Jan 2017 12:56:06 +0000

gst-plugins-good1.0 (1.8.3-1ubuntu0.2) xenial; urgency=medium

  * Rebase on top of security update.

 -- Iain Lane <iain.lane@canonical.com>  Thu, 24 Nov 2016 18:03:23 +0000

gst-plugins-good1.0 (1.8.3-1ubuntu0.1) xenial; urgency=medium

  * No-change backport from yakkety to 16.04 (LP: #1619600)

 -- Iain Lane <iain.lane@canonical.com>  Fri, 02 Sep 2016 13:09:37 +0100

gst-plugins-good1.0 (1.8.3-1ubuntu1) yakkety; urgency=medium

  * Merge with Debian unstable; remaining changes:
    + Import plugins from -bad that are needed for main applications.
      - jpegformat
      - camerabin2 (+ basecamerabinsrc + photography)
    + Break and Replace -bad versions which contained these plugins.
    + Add a library package containing the shared library and a -dev package for
      compiling against it. Add Breaks and Replaces against the plugins packages
      which formerly contained files shipped here.
    + Add 'pluginsdir' variable to our added pcfile for compatibility with
      some external software
    + debian/control{,.in}: Update Vcs-* for Ubuntu

 -- Iain Lane <iain.lane@canonical.com>  Thu, 01 Sep 2016 12:43:36 +0100

gst-plugins-good1.0 (1.8.3-1) unstable; urgency=medium

  * New upstream bugfix release.

 -- Sebastian Dröge <slomo@debian.org>  Fri, 19 Aug 2016 11:59:24 +0300

gst-plugins-good1.0 (1.8.2-1ubuntu0.3) xenial-security; urgency=medium

  * SECURITY UPDATE: incomplete fix for flx decoder
    - debian/patches/flxdec-bounds3.patch: don't unref() parent in the
      chain function in gst/flx/gstflxdec.c.
    - debian/patches/flxdec-bounds4.patch: rewrite logic based on
      GstByteReader/Writer in gst/flx/flx_color.c, gst/flx/flx_fmt.h,
      gst/flx/gstflxdec.c, gst/flx/gstflxdec.h.
    - No CVE number

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 25 Nov 2016 07:51:17 -0500

gst-plugins-good1.0 (1.8.2-1ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: code execution via out-of-bounds write in flx decoder
    - debian/patches/flxdec-bounds1.patch: add bounds checking to
      gst/flx/gstflxdec.c.
    - debian/patches/flxdec-bounds2.patch: fix compiler warnings in
      gst/flx/gstflxdec.c.
    - No CVE number

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 22 Nov 2016 08:47:28 -0500

gst-plugins-good1.0 (1.8.2-1ubuntu0.1) xenial; urgency=medium

  * No-change backport to 16.04

 -- Iain Lane <iain.lane@canonical.com>  Mon, 20 Jun 2016 17:50:12 +0100

# For older changelog entries, run 'apt-get changelog libgstreamer-plugins-good1.0-0'
