~ubuntu-branches/ubuntu/hardy/ffmpeg/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/ffmpeg/hardy-security » Changes from revision 23

From Revision 23 to 4

Rev	Summary	Authors	Tags	Date
23	* SECURITY UPDATE: arbitrary code execution via crafted flic... * SECURITY UPDATE: arbitrary code execution via crafted flic file - debian/patches/CVE-2010-3429.patch: add checks to libavcodec/flicvideo.c. - CVE-2010-3429 * SECURITY UPDATE: arbitrary code execution via crafted wmv file (LP: #690169) - debian/patches/CVE-2010-3908.patch: properly calculate size in libavcodec/utils.c. - CVE-2010-3908 * SECURITY UPDATE: denial of service via crafted .ogg file - debian/patches/CVE-2010-4704.patch: validate codebook in libavcodec/vorbis.c. - CVE-2010-4704 * SECURITY UPDATE: denial of service and possible code execution via crafted WebM file - debian/patches/CVE-2011-0480.patch: check rangebits in libavcodec/vorbis.c. - CVE-2011-0480 * SECURITY UPDATE: denial of service and possible code execution via crafted VC1 file (LP: #690169) - debian/patches/CVE-2011-0723.patch: fix invalid reads in libavcodec/vc1dec.c. - CVE-2011-0723	Marc Deslauriers	3:0.cvs20070307-5ubuntu7.6	13 years ago
22	debian/patches/CVE-2009-46XX/security-issue22.patch: removed... debian/patches/CVE-2009-46XX/security-issue22.patch: removed this patch as it was causing a regression. (LP: #567913)	Marc Deslauriers	3:0.cvs20070307-5ubuntu7.5	14 years ago
21	* SECURITY UPDATE: Fix a multitude of security issues * SECURITY UPDATE: Fix a multitude of security issues - debian/patches/CVE-2009-46XX/security-issue03.patch: check stream existence before assignment - debian/patches/CVE-2009-46XX/security-issue04.patch: check submap indexes - debian/patches/CVE-2009-46XX/security-issue05.patch: check classbook value - debian/patches/CVE-2009-46XX/security-issue06.patch: add checks for per-packet mode indexes and per-header mode mapping indexes - debian/patches/CVE-2009-46XX/security-issue07.patch: check masterbook index and subclass book index. - debian/patches/CVE-2009-46XX/security-issue08.patch: check res_setup->books - debian/patches/CVE-2009-46XX/security-issue09.patch: check begin/end/partition_size - debian/patches/CVE-2009-46XX/security-issue10.patch: check validity of channels & samplerate - debian/patches/CVE-2009-46XX/security-issue11.patch: fix book_idx check - debian/patches/CVE-2009-46XX/security-issue12.patch: sanity checks for magnitude and angle - debian/patches/CVE-2009-46XX/security-issue13.patch: fix = -> == typo - debian/patches/CVE-2009-46XX/security-issue14.patch: check dimensions against 0 too - debian/patches/CVE-2009-46XX/security-issue17.patch: make sure that all memory allocations succeed - debian/patches/CVE-2009-46XX/security-issue19.patch: set data_size to 0 to avoid having it uninitialized - debian/patches/CVE-2009-46XX/security-issue22.patch: check codec_id and codec_type, make sure priv_data is freed and codec is set to NULL - CVE-2009-4633 - CVE-2009-4634 - CVE-2009-4635 - CVE-2009-4637 - CVE-2009-4639 - CVE-2009-4640	Marc Deslauriers	3:0.cvs20070307-5ubuntu7.4	14 years ago
20	* SECURITY UPDATE: denial of service via a malformed Ogg Med... * SECURITY UPDATE: denial of service via a malformed Ogg Media (OGM) file - debian/patches/100_security_CVE-2008-4610.diff: properly check return codes in libavcodec/vp3.c. - CVE-2008-4610 * SECURITY UPDATE: buffer overflow caused by an incorrect DCA_MAX_FRAME_SIZE value - debian/patches/101_security_CVE-2008-4867.diff: set DCA_MAX_FRAME_SIZE to a correct value in libavcodec/dca.c. - CVE-2008-4867 * SECURITY UPDATE: arbitrary code execution via a malformed 4X movie file (LP: #323620) - debian/patches/102_security_CVE-2009-0385.diff: validate current_track value in libavformat/4xm.c. - CVE-2009-0385	Marc Deslauriers	3:0.cvs20070307-5ubuntu7.3	15 years ago
19	* SECURITY UPDATE: denial of service via a malformed Ogg Med... * SECURITY UPDATE: denial of service via a malformed Ogg Media (OGM) file - debian/patches/100_security_CVE-2008-4610.diff: properly check return codes in libavcodec/vp3.c. - CVE-2008-4610 * SECURITY UPDATE: buffer overflow caused by an incorrect DCA_MAX_FRAME_SIZE value - debian/patches/101_security_CVE-2008-4867.diff: set DCA_MAX_FRAME_SIZE to a correct value in libavcodec/dca.c. - CVE-2008-4867 * SECURITY UPDATE: arbitrary code execution via a malformed 4X movie file (LP: #323620) - debian/patches/102_security_CVE-2009-0385.diff: validate current_track value in libavformat/4xm.c. - CVE-2009-0385	Marc Deslauriers	3:0.cvs20070307-5ubuntu7.2	15 years ago
18	* SECURITY UPDATE: crash from crafted STR file. * SECURITY UPDATE: crash from crafted STR file. * Add debian/patches/400_str_file_crash.diff: backported upstream fixes. * References CVE-2008-3162	Kees Cook	3:0.cvs20070307-5ubuntu7.1	15 years ago
17	* added qt-faststart (LP: #200996) * added qt-faststart (LP: #200996) reorders the components of an H.264 MPEG4 video file to enable progressive download playback of certain H.264 videos in the Flash Player browser plugin. * debian/rules: - build: $(MAKE) qt-faststart - install: cp this to debian/tmp/usr/bin/ * debian/ffmpeg.install: - added usr/bin/qt-faststart	Stephan Hermann	3:0.cvs20070307-5ubuntu7	16 years ago
16	* Implemented 061_fix_resample_warnings.diff * Implemented 061_fix_resample_warnings.diff Fixes LP: #122266 * debian/control: - set MOTU as maintainer - set XSBC-Original-Maintainer: Debian multimedia packages maintainers	Mario Danic	3:0.cvs20070307-5ubuntu6	16 years ago
15	Rebuilt against new libx264 Rebuilt against new libx264	Anthony Mercatante	3:0.cvs20070307-5ubuntu5	16 years ago
14	make ffmpeg-config not add -ldts and -la52 to LDFLAGS. fixes... make ffmpeg-config not add -ldts and -la52 to LDFLAGS. fixes FTBFS in unrelated packages.	Reinhard Tartler	3:0.cvs20070307-5ubuntu4	16 years ago
13	* remove dependency on libdts-dev and liba52-dev from libavc... * remove dependency on libdts-dev and liba52-dev from libavcodec-dev * remove incorrect VCS information	Reinhard Tartler	3:0.cvs20070307-5ubuntu3	16 years ago
12	Fix FTBFS. was too agressive with removing libdts support, b... Fix FTBFS. was too agressive with removing libdts support, breaking the shared library build on amd64.	Reinhard Tartler	3:0.cvs20070307-5ubuntu2	16 years ago
11	* merge debian changes * merge debian changes * remove liba52 support for now (not in main ATM) * remove libdts support for now (not in main ATM)	Reinhard Tartler	3:0.cvs20070307-5ubuntu1	16 years ago
10	* fakesync for debian * fakesync for debian * added back epoch * tighten build dependency on x264, the version from feisty causes ftbfs	Reinhard Tartler	3:0.cvs20070307-4ubuntu1	16 years ago
9	* Have ffmpeg link against the PIC version of x264. Fixes FT... * Have ffmpeg link against the PIC version of x264. Fixes FTBFS on amd64. * Does not affect Ubuntu, only applicable when DEB_BUILD_OPTIONS=risky	John Dong	3:0.cvs20060823-3.1ubuntu4	17 years ago
8	Revert Original-Maintainer change in debian/control now that Revert Original-Maintainer change in debian/control now that pkgmaintainermangler is in place on the buildds. Fixes FTBFS.	Daniel T Chen	3:0.cvs20060823-3.1ubuntu3	17 years ago
7	* Make DEB_BUILD_OPTIONS=risky enable more codecs (closes: U... * Make DEB_BUILD_OPTIONS=risky enable more codecs (closes: Ubuntu #76354) * Patch ffmpeg to build against x264 >= 20061216. Does not affect Ubuntu's default builds but facilitates rebuilding by end users.	John Dong	3:0.cvs20060823-3.1ubuntu2	17 years ago
6	* Sync with Debian * Sync with Debian + Added epoch again	Sebastian Dröge	3:0.cvs20060823-3.1ubuntu1	17 years ago
5	* Sync with Debian: * Sync with Debian: + Added epoch again	Sebastian Dröge	3:0.cvs20060823-3ubuntu1	17 years ago
4	* Sync with Debian: * Sync with Debian: + Add the epoch again	Sebastian Dröge	3:0.cvs20060823-0ubuntu1	17 years ago

Older »