Change log for ffmpeg-debian package in Ubuntu

123 of 23 results
Obsolete in jaunty-updates
Obsolete in jaunty-security
ffmpeg-debian (3:0.svn20090303-1ubuntu6.2) jaunty-security; urgency=low

  * debian/patches/CVE-2009-46XX/security-issue22.patch: removed this
    patch as it was causing a regression. (LP: #567913)
 -- Marc Deslauriers <email address hidden>   Fri, 23 Apr 2010 08:12:31 -0400
Obsolete in intrepid-updates
Obsolete in intrepid-security
ffmpeg-debian (3:0.svn20080206-12ubuntu3.3) intrepid-security; urgency=low

  * debian/patches/CVE-2009-46XX/security-issue22.patch: removed this
    patch as it was causing a regression. (LP: #567913)
 -- Marc Deslauriers <email address hidden>   Fri, 23 Apr 2010 08:13:39 -0400
Superseded in intrepid-updates
Superseded in intrepid-security
ffmpeg-debian (3:0.svn20080206-12ubuntu3.2) intrepid-security; urgency=low

  * SECURITY UPDATE: Fix a multitude of security issues
    - debian/patches/CVE-2009-46XX/security-issue03.patch: check stream
      existence before assignment
    - debian/patches/CVE-2009-46XX/security-issue04.patch: check submap
      indexes
    - debian/patches/CVE-2009-46XX/security-issue05.patch: check classbook
      value
    - debian/patches/CVE-2009-46XX/security-issue06.patch: add checks for
      per-packet mode indexes and per-header mode mapping indexes
    - debian/patches/CVE-2009-46XX/security-issue07.patch: check masterbook
      index and subclass book index.
    - debian/patches/CVE-2009-46XX/security-issue08.patch: check
      res_setup->books
    - debian/patches/CVE-2009-46XX/security-issue09.patch: check
      begin/end/partition_size
    - debian/patches/CVE-2009-46XX/security-issue10.patch: check validity
      of channels & samplerate
    - debian/patches/CVE-2009-46XX/security-issue11.patch: fix book_idx
      check
    - debian/patches/CVE-2009-46XX/security-issue12.patch: sanity checks
      for magnitude and angle
    - debian/patches/CVE-2009-46XX/security-issue13.patch: fix = -> == typo
    - debian/patches/CVE-2009-46XX/security-issue14.patch: check dimensions
      against 0 too
    - debian/patches/CVE-2009-46XX/security-issue15.patch: fix
      init_get_bits() buffer size
    - debian/patches/CVE-2009-46XX/security-issue17.patch: make sure that
      all memory allocations succeed
    - debian/patches/CVE-2009-46XX/security-issue18.patch: fix possible
      buffer over-read in vorbis_comment
    - debian/patches/CVE-2009-46XX/security-issue19.patch: set data_size to
      0 to avoid having it uninitialized
    - debian/patches/CVE-2009-46XX/security-issue20.patch: disable parsing
      for ogg streams where no ogg header was found
    - debian/patches/CVE-2009-46XX/security-issue22.patch: check codec_id
      and codec_type, make sure priv_data is freed and codec is set to NULL
    - CVE-2009-4632
    - CVE-2009-4633
    - CVE-2009-4634
    - CVE-2009-4635
    - CVE-2009-4637
    - CVE-2009-4639
    - CVE-2009-4640
 -- Marc Deslauriers <email address hidden>   Thu, 08 Apr 2010 09:13:16 -0400
Superseded in jaunty-updates
Superseded in jaunty-security
ffmpeg-debian (3:0.svn20090303-1ubuntu6.1) jaunty-security; urgency=low

  * SECURITY UPDATE: Fix a multitude of security issues
    - debian/patches/CVE-2009-46XX/security-issue03.patch: check stream
      existence before assignment
    - debian/patches/CVE-2009-46XX/security-issue04.patch: check submap
      indexes
    - debian/patches/CVE-2009-46XX/security-issue05.patch: check classbook
      value
    - debian/patches/CVE-2009-46XX/security-issue06.patch: add checks for
      per-packet mode indexes and per-header mode mapping indexes
    - debian/patches/CVE-2009-46XX/security-issue07.patch: check masterbook
      index and subclass book index.
    - debian/patches/CVE-2009-46XX/security-issue08.patch: check
      res_setup->books
    - debian/patches/CVE-2009-46XX/security-issue09.patch: check
      begin/end/partition_size
    - debian/patches/CVE-2009-46XX/security-issue10.patch: check validity
      of channels & samplerate
    - debian/patches/CVE-2009-46XX/security-issue11.patch: fix book_idx
      check
    - debian/patches/CVE-2009-46XX/security-issue12.patch: sanity checks
      for magnitude and angle
    - debian/patches/CVE-2009-46XX/security-issue13.patch: fix = -> == typo
    - debian/patches/CVE-2009-46XX/security-issue14.patch: check dimensions
      against 0 too
    - debian/patches/CVE-2009-46XX/security-issue15.patch: fix
      init_get_bits() buffer size
    - debian/patches/CVE-2009-46XX/security-issue17.patch: make sure that
      all memory allocations succeed
    - debian/patches/CVE-2009-46XX/security-issue18.patch: fix possible
      buffer over-read in vorbis_comment
    - debian/patches/CVE-2009-46XX/security-issue19.patch: set data_size to
      0 to avoid having it uninitialized
    - debian/patches/CVE-2009-46XX/security-issue20.patch: disable parsing
      for ogg streams where no ogg header was found
    - debian/patches/CVE-2009-46XX/security-issue22.patch: check codec_id
      and codec_type, make sure priv_data is freed and codec is set to NULL
    - CVE-2009-4632
    - CVE-2009-4633
    - CVE-2009-4634
    - CVE-2009-4635
    - CVE-2009-4637
    - CVE-2009-4639
    - CVE-2009-4640
 -- Marc Deslauriers <email address hidden>   Thu, 08 Apr 2010 09:12:45 -0400
Deleted in karmic-release (Reason: renamed to ffmpeg)
ffmpeg-debian (4:0.5+svn20090609-1ubuntu3) karmic; urgency=low

  * do not forcefully enable objenjpeg, it is not avaiable in this build
    anyway
  * don't build against faac in any case, it is deemed non-free

 -- Reinhard Tartler <email address hidden>   Sat, 25 Jul 2009 09:15:12 +0200
Superseded in karmic-release
ffmpeg-debian (4:0.5+svn20090609-1ubuntu2) karmic; urgency=low

  * remove libopenjpeg-dev from build depends (fixes FTBFS)
  * remove duplicate libxvmc-dev build-dependency

 -- Reinhard Tartler <email address hidden>   Fri, 24 Jul 2009 21:53:47 +0200
Superseded in karmic-release
ffmpeg-debian (4:0.5+svn20090609-1ubuntu1) karmic; urgency=low

  * merge from debian. Remaining changes:
    - don't build-depend on libfaad-dev, disabling faad decoder.
    - build arm vfp variant
  * update gbp.conf
  * move gbp.conf to debian/

Superseded in karmic-release
Obsolete in jaunty-release
ffmpeg-debian (3:0.svn20090303-1ubuntu6) jaunty; urgency=low

  * vfp CFLAGS: add "-mfpu=vfp -mfloat-abi=softfp".

Superseded in jaunty-release
ffmpeg-debian (3:0.svn20090303-1ubuntu4) jaunty; urgency=low

  * brown paperbag upload. Actually include the patch intended for the
    last upload.

 -- Reinhard Tartler <email address hidden>   Sat, 21 Mar 2009 14:55:46 +0100
Superseded in jaunty-release
ffmpeg-debian (3:0.svn20090303-1ubuntu2) jaunty; urgency=low

  * No-change rebuild to fix lpia shared library dependencies.

 -- Colin Watson <email address hidden>   Thu, 19 Mar 2009 17:26:36 +0000
Superseded in intrepid-updates
Superseded in intrepid-security
ffmpeg-debian (3:0.svn20080206-12ubuntu3.1) intrepid-security; urgency=low

  * SECURITY UPDATE: denial of service via a malformed Ogg Media (OGM) file
    - debian/patches/100_security_CVE-2008-4610.diff: properly check return
      codes in libavcodec/vp3.c.
    - CVE-2008-4610
  * SECURITY UPDATE: multiple buffer overflows in DTS generation code
    - debian/patches/101_security_CVE-2008-4866.diff: make sure delay is smaller
      than the maximum allowed in libavformat/utils.c and increase maximum
      allowed in libavformat/avformat.h.
    - CVE-2008-4866
  * SECURITY UPDATE: buffer overflow caused by an incorrect DCA_MAX_FRAME_SIZE
    value
    - debian/patches/102_security_CVE-2008-4867.diff: set DCA_MAX_FRAME_SIZE to
      a correct value in libavcodec/dca.c.
    - CVE-2008-4867
  * SECURITY UPDATE: arbitrary code execution via a malformed 4X movie file
    (LP: #323620)
    - debian/patches/103_security_CVE-2009-0385.diff: validate current_track
      value in libavformat/4xm.c.
    - CVE-2009-0385

 -- Marc Deslauriers <email address hidden>   Fri, 13 Mar 2009 11:30:05 -0400
Superseded in jaunty-release
ffmpeg-debian (3:0.svn20090303-1ubuntu1) jaunty; urgency=low

  * FFE granted in LP: #340303.

  * merge from debian/unstable.
  * remaining changes to debian:
    - don't build-depend on libfaad-dev, disabling faad decoder.

Superseded in jaunty-release
ffmpeg-debian (3:0.svn20090204-2ubuntu1) jaunty; urgency=low

  * merge from debian. Remaining changes:
    - don't build depend on libfaad-dev

Superseded in jaunty-release
ffmpeg-debian (3:0.svn20090119-1ubuntu1) jaunty; urgency=low

  * merge from debian. LP: #318501
  * new version fixes CVE-2008-3230, LP: #253767

 -- Reinhard Tartler <email address hidden>   Tue, 20 Jan 2009 09:20:53 +0100
Superseded in jaunty-release
ffmpeg-debian (3:0.svn20081115-1ubuntu1) jaunty; urgency=low

  * merge from debian.
  * keep myself in the maintainer field. If you are touching this or the
    'ffmpeg' package in multiverse, please get in touch with me. Both
    source packages come from the same packaging branch.
  * drop dependency on faad.

Superseded in jaunty-release
ffmpeg-debian (3:0.svn20081108-1ubuntu3) jaunty; urgency=low

  * really disable faad support completely.

 -- Reinhard Tartler <email address hidden>   Mon, 10 Nov 2008 10:58:01 +0100
Superseded in jaunty-release
ffmpeg-debian (3:0.svn20081108-1ubuntu2) jaunty; urgency=low

  * drop the patch to dlopen faad at runtime for now. it needs more
    polishing, and we can have that functionality easier with the 'ffmpeg'
    source package that will appear in multiverse.

 -- Reinhard Tartler <email address hidden>   Mon, 10 Nov 2008 10:31:47 +0100
Superseded in jaunty-release
ffmpeg-debian (3:0.svn20081108-1ubuntu1) jaunty; urgency=low

  * merge from debian.
  * keep myself in the maintainer field. If you are touching this or the
    'ffmpeg' package in multiverse, please get in touch with me. Both
    source packages come from the same packaging branch.
  * drop dependency on faad.
  * import patches from old packaging to dlopen libfaad at runtime.

 -- Reinhard Tartler <email address hidden>   Mon, 10 Nov 2008 07:31:16 +0100
Superseded in jaunty-release
Obsolete in intrepid-release
ffmpeg-debian (3:0.svn20080206-12ubuntu3) intrepid; urgency=low

  * snatch patch from debian: enable ffserver in cmov, altivec and vis
    variants. (Closes: #501002)

 -- Reinhard Tartler <email address hidden>   Fri, 03 Oct 2008 16:33:48 +0200
Superseded in intrepid-release
ffmpeg-debian (3:0.svn20080206-12ubuntu2) intrepid; urgency=low

  * Replace Vcs-Svn headers with Vcs-Bzr header
  * enable libfaad support via dlopen(). LP: #6366
  * enable liba52 support via dlopen(). LP: #197133
  * add libfaad0 and liba52-0.7.4, to Suggests of libavcodec51
  * Adjust sonames used by dlopen() on liba52 and libfaad in liba52.c and
    libfaad.c

    This change has been staged in the motumedia PPA and verified by
    myself. While doing this the new patch
    51_dlopen_correct_libfaad_and_liba52_so.diff has been created.

 -- Reinhard Tartler <email address hidden>   Fri, 26 Sep 2008 19:56:10 +0200
Superseded in intrepid-release
ffmpeg-debian (3:0.svn20080206-12ubuntu1) intrepid; urgency=low

  * Resyncronize with debian. Remaining changes:
    - add epoch needed for ubuntu.
    - debian/control: drop build dependencies on libfaad,
      both not in ubuntu/main.
    - debian/control: adjust dependency for coping with annoying epoch.
    - keep myself in the maintainer field.
    - add epochs for conflicts/replaces entries in debian/control as well.

Superseded in intrepid-release
ffmpeg-debian (3:0.svn20080206-11ubuntu1) intrepid; urgency=low

  * Resyncronize with debian. Remaining changes:
    - add epoch needed for ubuntu.
    - debian/control: drop build dependencies on libfaad,
      both not in ubuntu/main.
    - debian/control: adjust dependency for coping with annoying epoch.
    - keep myself in the maintainer field.
    - add epochs for conflicts/replaces entries in debian/control as well.

 -- Reinhard Tartler <email address hidden>   Wed, 16 Jul 2008 15:17:28 +0200
Superseded in intrepid-release
ffmpeg-debian (3:0.svn20080206-10ubuntu1) intrepid; urgency=low

  * Resyncronize with debian. Remaining changes:
    - add epoch needed for ubuntu.
    - debian/control: drop build dependencies on libfaad,
      both not in ubuntu/main.
    - debian/control: adjust dependency for coping with annoying epoch.
    - Set myself in the maintainer field.
  * add epochs for conflicts/replaces entries in debian/control as well.

123 of 23 results