~ubuntu-branches/ubuntu/gutsy/mplayer/gutsy-updates : changes

~ubuntu-branches/ubuntu/gutsy/mplayer/gutsy-updates » Changes from revision 34

From Revision 34 to 15

Rev	Summary	Authors	Tags	Date
34	* SECURITY UPDATE: Multiple integer underflows in MPlayer 1.... * SECURITY UPDATE: Multiple integer underflows in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory (LP: #279030) - libmpdemux/demux_real.c: Address various integer underflows. Patch from oCert.org. - http://www.ocert.org/advisories/ocert-2008-013.html - CVE-2008-3827 * SECURITY UPDATE: Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. (LP: #212601). - Cherrypicked rev 80 from lp:~ubuntu-dev/mplayer/ubuntu (William Grant) stream/realrtsp/sdpplin.c: Properly check the stream ID. Patch from upstream. - CVE-2008-1558	Stefan Lesicnik	2:1.0~rc1-0ubuntu13.3	15 years ago
33	* SECURITY UPDATE: buffer overruns in RMMF, CDDB, MOV demuxe... * SECURITY UPDATE: buffer overruns in RMMF, CDDB, MOV demuxer, FLAC header parser, and URL parser. (LP: #191488) * stream/librtsp/rtsp_session.c, stream/realrtsp/rmff.c, stream/realrtsp/rmff.h, libmpdemux/demux_audio.c, libmpdemux/demux_mov.c, stream/stream_cddb.c, stream/url.c: Patches from upstream. * References: - CVE-2008-0225 - CVE-2008-0238 - CVE-2008-0485 - CVE-2008-0486 - CVE-2008-0629 - CVE-2008-0630	William Grant	2:1.0~rc1-0ubuntu13.2	16 years ago
32	* SECURITY UPDATE: buffer overrun in mpdemux code (LP: #1408... * SECURITY UPDATE: buffer overrun in mpdemux code (LP: #140891). * libmpdemux/aviheader.c: Apply upstream patch. * References: - CVE-2007-4938	William Grant	2:1.0~rc1-0ubuntu13.1	16 years ago
31	01_default_config.dpatch: Fix typo that prevent the screensa... 01_default_config.dpatch: Fix typo that prevent the screensaver to be disabled (LP: #152080)	Laurent Bigonville	2:1.0~rc1-0ubuntu13	16 years ago
30	* Add 01_default_config.dpatch. * Add 01_default_config.dpatch. - Sets screensaver by default for non gmplayer. (LP: #95038), (LP: #139770) - Sets xv as video output for gmplayer and mplayer. (LP: #65165), (LP: #146307) * Add dpatch to build-depends in debian/control. * Add dpatch support to debian/rules.	Mario Limonciello	2:1.0~rc1-0ubuntu12	16 years ago
29	Added Network Audio System (NAS) support (LP: #110151) Added Network Audio System (NAS) support (LP: #110151)	Alfredo Matos	2:1.0~rc1-0ubuntu11	16 years ago
28	SECURITY UPDATE: Upstream fix for CVE 2007-2948. Fixes a buf... SECURITY UPDATE: Upstream fix for CVE 2007-2948. Fixes a buffer overrun in the cddb code. (LP: #118855)	William Grant	2:1.0~rc1-0ubuntu10	16 years ago
27	* Rebuild to get correct version of libdirectfb * Rebuild to get correct version of libdirectfb * Modified Maintainer value to match Debian-Maintainer-Field Spec	Sarah Hobbs	2:1.0~rc1-0ubuntu9	17 years ago
26	* Fix some formatting in our patches. * Fix some formatting in our patches. * etc/examples.conf: - Add ac=mad, to use libmad as first choice. * debian/rules: - Reenable mp3lib again... sigh	Christian Bjälevik	2:1.0~rc1-0ubuntu8	17 years ago
25	[ Christian Bjälevik ] [ Christian Bjälevik ] * debian/rules: - Add --disable-mp3lib to actually disable the damn thing. * DOCS/man/en/mplayer.1: - Remove documentation about -vo aa:help (LP: #43301). * Various files (see bzr diff for info): - Apply patch taken from Mandriva CVS (LP: #53947) to use dbus for disabling gnome-screensaver. [ William Grant ] * Enable LADSPA (LP: #67400) - Add ladspa-sdk to Build-Depends.	Christian Bjälevik	2:1.0~rc1-0ubuntu7	17 years ago
24	* debian/rules: * debian/rules: - Disable mp3lib and enable mad (LP: #85751). * debian/control: - Add libmad0-dev to Build-Deps.	Christian Bjälevik	2:1.0~rc1-0ubuntu6	17 years ago
23	* SECURITY UPDATE: DirectShow decoder heap overflow. * SECURITY UPDATE: DirectShow decoder heap overflow. * loader/dshow/DS_VideoDecoder.c: added upstream fix. * References http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072	Kees Cook	2:1.0~rc1-0ubuntu5	17 years ago
22	* SECURITY UPDATE: DMO decoder heap overflow. * SECURITY UPDATE: DMO decoder heap overflow. * loader/dmo/DMO_VideoDecoder.c: added upstream fix. * References http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204 CVE-2007-1246	Kees Cook	2:1.0~rc1-0ubuntu4	17 years ago
21	* debian/rules: * debian/rules: - Add --enable-mp3lib to CONFIGURE_AUDIO_CODECS (LP: #83580). - Remove --disable-mp3lib. This one took some time to find.	Christian Bjälevik	2:1.0~rc1-0ubuntu3	17 years ago
20	* debian/rules: * debian/rules: - Add --enable-libvorbis to CONFIGURE_AUDIO_CODECS. * debian/{compat,control}: - Bump Standard-Versions and debhelper >=. * Applied patch from: http://0pointer.de/public/mplayer-pulse.patch and adapted it for our current mplayer. Closes: #83493. * debian/{control,rules} - Add Build-Deps on libpulse-dev and --enable-pulse.	Christian Bjälevik	2:1.0~rc1-0ubuntu2	17 years ago
19	* New upstream version. * New upstream version. * Apply RTSP buffer overflow fix patch from upstream. * Remove --enable-{vorbis,x264} and s/internal-tremor/tremor-internal/ in debian/rules. The defaults are detected properly, and forcing x264 now causes it to FTBFS. * Remove DOCS/it from dh_installdocs. Aforementioned directory no longer exists.	William Grant	2:1.0~rc1-0ubuntu1	17 years ago
18	* No-change rebuild against newer libx264-dev (affects * No-change rebuild against newer libx264-dev (affects Ubuntu: #63842), - RC freeze exception granted by Andrew Mitchell.	Daniel T Chen	2:0.99+1.0pre8-0ubuntu8	17 years ago
17	* libvo/osd_template.c: * libvo/osd_template.c: - Add patch from Ubuntu #62209 to fix AMD64 FTBFS. Thanks Andreas Schultz.	Christian Bjälevik	2:0.99+1.0pre8-0ubuntu7	17 years ago
16	* debian/preinst: * debian/preinst: - Remove codecs.conf if it exists on the system (thanks Johan Kiviniemi).	Christian Bjälevik	2:0.99+1.0pre8-0ubuntu6	17 years ago
15	* configure: * configure: - Revert "if cygwin", we don't want to care changes like that. * etc/example.conf: - Revert vo and make "ao=alsa,". That means prefer alsa and then auto-detect the rest. * libmpcodecs/ve_lavc.c: - Revert our changes. We build against internal ffmpeg again. * debian/control: - Dropped dpatch and libmad0-dev as Build-Deps. - Drop all dummy packages and fix Conflicts/Replaces. - Dropped the field Uploaders. Useless for Ubuntu. - Dropped libavcodec-dev, libavformat-dev, libpostproc-dev from Build-Deps. * debian/rules: - Stop copying config.{guess,sub}, this just add bloat to the diff. - Use --with-codecsdir instead of setting the same for win32, xanim and real. Also drop --enable-{win32,real}, they are implied by --with-codecsdir and enabled on all arches now. - Drop defaults (--datadir and --disable-external-faad). - Dropped libmad, the other two mp3-decoders should be enough. - --enable-dshow was dropped upstream. - Stop installing codecs.conf. - Build against internal ffmpeg.	Christian Bjälevik	2:0.99+1.0pre8-0ubuntu5	17 years ago

Older »