-
Committer:
Gauvain Pocentek
-
Date:
2011-04-21 13:52:46 UTC
-
Revision ID:
gauvain@pocentek.net-20110421135246-bpre0ox22r3tjw2x
* Merge from maverick.
* debian/control:
- update maintainer and uploaders
- use our addresses in Vcs-* fields
- build-depends on libfaac-dev, libopencore-amrnb-dev and
libopencore-amrwb-dev to add aac encoding and amr support lp: #490227
- recommends apport-hooks-medibuntu for lib*-extra-* to catch all bug
reports.
* SECURITY UPDATE: denial of service via crafted .ogg file
- debian/patches/fix-CVE-2010-4704.patch: validate codebook in
libavcodec/vorbis_dec.c.
- CVE-2010-4704
* SECURITY UPDATE: denial of service and possible code execution via
crafted WebM file
- debian/patches/fix-CVE-2011-0480.patch: check rangebits in
libavcodec/vorbis_dec.c.
- CVE-2011-0480
* SECURITY UPDATE: denial of service and possible code execution via
crafted VC1 file (LP: #690169)
- debian/patches/fix-CVE-2011-0723.patch: fix invalid reads in
libavcodec/vc1dec.c.
- CVE-2011-0723