~ubuntu-branches/ubuntu/intrepid/xine-lib/intrepid-updates : changes

~ubuntu-branches/ubuntu/intrepid/xine-lib/intrepid-updates » Changes from revision 57

From Revision 57 to 38

Rev	Summary	Authors	Tags	Date
57	* SECURITY UPDATE: Integer overflow in the 4xm demuxer * SECURITY UPDATE: Integer overflow in the 4xm demuxer - debian/patches/14_SECURITY_CVE-2009-0698-2.dpatch: Previous fix was incomplete. Fix additional integer overflow in src/demuxers/demux_4xm.c. - CVE-2009-0698 * SECURITY UPDATE: Integer overflow in the QT demuxer via large count value in an STTS atom - debian/patches/15_SECURITY_CVE-2009-1274.dpatch: validate atom size in src/demuxers/demux_qt.c. - CVE-2009-1274	Marc Deslauriers	1.1.15-0ubuntu3.3	15 years ago
56	* REGRESSION: Broken size checks in CVE-2008-5239 input plug... * REGRESSION: Broken size checks in CVE-2008-5239 input plugins patch (LP: #322834) - debian/patches/12_SECURITY_CVE-2008-5239-fix.dpatch: fix the size checks in src/input/input_.c broken by the 08_SECURITY_CVE-2008-5239.dpatch security patch. - CVE-2008-5239 SECURITY UPDATE: Integer overflow in the 4xm demuxer - debian/patches/13_SECURITY_CVE-2009-0698.dpatch: Make sure we don't overflow fourxm->track_count in src/demuxers/demux_4xm.c. - CVE-2009-0698	Marc Deslauriers	1.1.15-0ubuntu3.2	15 years ago
55	* SECURITY UPDATE: backported security fixes from upstream x... * SECURITY UPDATE: backported security fixes from upstream xine-lib hg repo: - debian/patches/01_SECURITY_invalid_track_type.dpatch: Avoid segfault on invalid track type in Matroska files. - debian/patches/02_SECURITY_ffmpeg_video_overflow.dpatch: Heap buffer overflow in the ffmpeg video decoder. - debian/patches/03_SECURITY_ffmpeg_audio_overflow.dpatch: Integer overflow in the ffmpeg audio decoder - debian/patches/04_SECURITY_cdda_server_overflow.dpatch: Integer overflow in the the CDDA server. - debian/patches/05_SECURITY_CVE-2008-5234.dpatch: Heap overflow and unchecked malloc in Quicktime atom parsing. (CVE-2008-5234, CVE-2008-5242) - debian/patches/06_SECURITY_CVE-2008-5236.dpatch: Buffer overflows in Matroska, Real and RealAudio demuxers. (CVE-2008-5236) - debian/patches/07_SECURITY_CVE-2008-5237.dpatch: Integer overflows in MNG and QT demuxers. (CVE-2008-5237) - debian/patches/08_SECURITY_CVE-2008-5239.dpatch: Out-of-bounds reads and heap-based buffer overflows from unchecked or incompletely-checked read function results. (CVE-2008-5239) - debian/patches/09_SECURITY_CVE-2008-5240.dpatch: Unchecked malloc using untrusted values. (CVE-2008-5240) - debian/patches/10_SECURITY_CVE-2008-5241.dpatch: Integer underflow in qt compressed atom handling. (CVE-2008-5241) - debian/patches/11_SECURITY_CVE-2008-5243.dpatch: Buffer indexing using untrusted or unchecked values. (CVE-2008-5243)	Marc Deslauriers	1.1.15-0ubuntu3.1	15 years ago
54	Changed xine-engine/buffer.h to use __inline__ Changed xine-engine/buffer.h to use __inline__ vs inline in patch 00_fix_inline.diff to correct applications from FTBFS when using c90 mode of GCC (LP: #274194)	Michael Casadevall	1.1.15-0ubuntu3	15 years ago
53	drop dependency on libfaad-dev, it is not in main. drop dependency on libfaad-dev, it is not in main.	Reinhard Tartler	1.1.15-0ubuntu2	15 years ago
52	* New upstream release (LP: #261135) * New upstream release (LP: #261135) - introduces updated faad plugin (LP: #76566, #123456) - Fixes CVE-2008-3231	Reinhard Tartler	1.1.15-0ubuntu1	15 years ago
51	* merge from debian unstable. Remaining changes: * merge from debian unstable. Remaining changes: - disable the jack plugin - Modify Maintainer value to match the DebianMaintainerField specification. * update XS-Vcs-Url to public branch location.	Reinhard Tartler	1.1.14-3ubuntu1	15 years ago
50	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - disable the jack plugin to make dapper->hardy upgrades work (LP #203605) - adjust deps to make sure Kubuntu CDs are installable.	Kees Cook	1.1.14-2ubuntu1	15 years ago
49	Drop libxine-ffmpeg recommends from libxine1, since otherwis... Drop libxine-ffmpeg recommends from libxine1, since otherwise Kubuntu CDs are still uninstallable. (LP: #257611)	Martin Pitt	1.1.14-1ubuntu3	15 years ago
48	libxine1 dependencies: Prefer libxine1-misc-plugins over lib... libxine1 dependencies: Prefer libxine1-misc-plugins over libxine1-plugins, since the latter pulls in -ffmpeg, whic pulls in libavcodec51, which is banned from CDs. This unbreaks Kubuntu CDs for Alpha 4, although is not the final solution we might want.	Martin Pitt	1.1.14-1ubuntu2	15 years ago
47	* merge from debian unstable. Remaining changes: * merge from debian unstable. Remaining changes: - disable the jack plugin in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Maintainer value to match the DebianMaintainerField specification. * New upstream fixes: - playback of MJPEG files LP: #93076 - CVE-2008-1878 LP: #235904 - CVE-2008-1686 LP: #218652 * remove Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1). We don't support upgrades from dapper/feisty anymore.	Reinhard Tartler	1.1.14-1ubuntu1	15 years ago
46	* build against a newer ffmpeg. * build against a newer ffmpeg. * don't try to install the jack plugin, fixes FTBFS.	Reinhard Tartler	1.1.12-2ubuntu2	16 years ago
45	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - disable the jack plugin - add Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1) in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Maintainer value to match the DebianMaintainerField specification.	Reinhard Tartler	1.1.12-2ubuntu1	16 years ago
44	[ Darren Salt ] [ Darren Salt ] * Fixes from upstream hg: - Matroska demuxer regression. (Closes: #474316) - PulseAudio plugin backported & re-enabled. This takes precedence over ALSA, but falls back cleanly. [ Reinhard Tartler ] * Cherrypick the above changes to the ubuntu package (LP: #176332, #131914)	Reinhard Tartler	1.1.11.1-1ubuntu3	16 years ago
43	[ Darren Salt ] [ Darren Salt ] * Fixes from upstream hg: - Quicktime demuxer regression. (Closes: #473499, #473631) - Wavpack MIME type information. [ Reinhard Tartler ] - merge changes from debian packaging hg to fetch fix for LP: #210510	Reinhard Tartler	1.1.11.1-1ubuntu2	16 years ago
42	* New upstream Version, merge from debian/unstable. * New upstream Version, merge from debian/unstable. - Freeze exception Granted in LP: #204557 - Inclused Security fixes: LP: #195700 * Remaining Changes: - add Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1) in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Maintainer value to match the DebianMaintainerField specification.	Reinhard Tartler	1.1.11.1-1ubuntu1	16 years ago
41	* debian/control: * debian/control: - add Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1) in libxine1-bin to make dapper->hardy upgrades work (LP: #203605) * Modify Maintainer value to match the DebianMaintainerField specification.	Michael Vogt	1.1.10.1-2ubuntu1	16 years ago
40	[Darren Salt] [Darren Salt] * libxine-dev: backport an m4 version-parsing fix from hg. * Fixed an off-by-one (introduced in the security fix) which breaks playback of some FLAC files. (Closes: #466746) * Versioned build-dep on libmagick9-dev (for libmagick10). (Closes: #466681) Add libmagick-dev as an alternative, with the same version requirement.	Darren Salt	1.1.10.1-2	16 years ago
39	No-change rebuild against libmagick10. No-change rebuild against libmagick10.	Steve Langasek	1.1.10-1build1	16 years ago
38	* New upstream release (Closes: #459836)... * New upstream release (Closes: #459836)... * ... fixing some security bugs: - CVE-2008-0225: Heap-based buffer overflow in rmff_dump_cont function which allows remote attacker to execute arbitrary code via a crafted SDP Abstract attribute (Closes: #460551). This also acks 1.1.8-3+lenny1 (NMU by the security team). - Related to CVE-2006-1664: Buffer overflow which allows a remote attacker to execute arbitrary code or crash the client program via a crafted ASF header. * ... and fixing some other bugs, including: - Disappearing audio. (Closes: #461970) [ Darren Salt ] * Build-depend on gs-gpl \| gs. Avoids FTBFS where recommended packages aren't automatically installed. * Put libxine1-doc in section libdevel. * Move libxine1-doc \| libxine-doc to Suggests: in libxine1. (Closes: #458103) * Add postinst scripts to ensure that the documentation symlinks are properly created. (This is really dpkg bugginess.) (Closes: #458865) * Standards version 3.7.3; no changes needed. [ Reinhard Tartler ] * Actually install xineplug_decode_w32dll.so and xineplug_decode_qt.so on i386. debian/rules accidentally used $< where it should have been $^. Thanks to Gert Kulyk for reporting! LP: #182400 * Fix XS-Hg-VCS headers in debian/control LP: #183886	Darren Salt	1.1.10-1	16 years ago

Older »