~ubuntu-branches/ubuntu/lucid/ffmpeg/lucid-security : changes

~ubuntu-branches/ubuntu/lucid/ffmpeg/lucid-security » Changes from revision 48

From Revision 48 to 29

Rev	Summary	Authors	Tags	Date
48	* SECURITY UPDATE: unspecified security issue in vp56.c (LP:... * SECURITY UPDATE: unspecified security issue in vp56.c (LP: #1104019) - debian/patches/CVE-2012-2783.patch: release frames on error in libavcodec/vp56.c. - CVE-2012-2783 * SECURITY UPDATE: double free vulnerability in mpeg_decode_frame - debian/patches/CVE-2012-2803.patch: do not decode extradata more than once in libavcodec/mpeg12.c. - CVE-2012-2803	Marc Deslauriers	4:0.5.9-0ubuntu0.10.04.3	11 years ago
47	* SECURITY UPDATE: security issues in decode_pic * SECURITY UPDATE: security issues in decode_pic - debian/patches/CVE-2012-2777-2784.patch: prevent changing w/h in libavcodec/cavsdec.c. - CVE-2012-2777 - CVE-2012-2784 * SECURITY UPDATE: out of array read in avi_read_packet function - debian/patches/CVE-2012-2788.patch: use accurate size in libavformat/avidec.c. - CVE-2012-2788 * SECURITY UPDATE: out of array writes in avs.c - debian/patches/CVE-2012-2801.patch: force dimensions in libavcodec/avs.c. - CVE-2012-2801	Marc Deslauriers	4:0.5.9-0ubuntu0.10.04.2	11 years ago
46	* SECURITY UPDATE: Updated to libav 0.5.9 to fix multiple se... * SECURITY UPDATE: Updated to libav 0.5.9 to fix multiple security issues. (LP: #1012132) - CVE-2011-3929 - CVE-2011-3936 - CVE-2011-3940 - CVE-2011-3947 - CVE-2011-3951 - CVE-2011-3952 - CVE-2012-0851 - CVE-2012-0852 - CVE-2012-0853 - CVE-2012-0858 - CVE-2012-0859 - CVE-2012-0947 * Removed upstreamed patches: - CVE-2010-3429.patch - CVE-2010-3908.patch - CVE-2010-4704.patch - CVE-2011-0480.patch - CVE-2011-0722.patch - CVE-2011-0723.patch - CVE-2011-2161.patch - CVE-2011-3362.patch - CVE-2011-3504.patch - CVE-2011-4351.patch - CVE-2011-4353.patch - CVE-2011-4364.patch - CVE-2011-4579.patch	Marc Deslauriers	4:0.5.9-0ubuntu0.10.04.1	11 years ago
45	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via malformed Matroska file - debian/patches/CVE-2011-3504.patch: verify memory allocation failures in libavformat/matroskadec.c. - CVE-2011-3504 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing QDM2 stream - debian/patches/CVE-2011-4351.patch: check boundaries in libavcodec/qdm2.c. - CVE-2011-4351 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing VP5 or VP6 streams - debian/patches/CVE-2011-4353.patch: check indexes in libavcodec/vp5.c and libavcodec/vp6.c. - CVE-2011-4353 * SECURITY UPDATE: denial of service and possible code execution via malformed VMD file - debian/patches/CVE-2011-4364.patch: properly check lengths in libavcodec/vmdav.c. - CVE-2011-4364 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing svq1 stream - debian/patches/CVE-2011-4579.patch: set dimensions after they have changed in libavcodec/svq1dec.c. - CVE-2011-4579	Marc Deslauriers	4:0.5.1-1ubuntu1.3	12 years ago
44	* SECURITY UPDATE: denial of service via malformed APE file * SECURITY UPDATE: denial of service via malformed APE file - debian/patches/CVE-2011-2161.patch: make sure there are frames in libavformat/ape.c. - CVE-2011-2161 * SECURITY UPDATE: arbitrary code execution via malformed CAVS file - debian/patches/CVE-2011-3362.patch: validate values in libavcodec/cavsdec.c. - CVE-2011-3362	Marc Deslauriers	4:0.5.1-1ubuntu1.2	12 years ago
43	* SECURITY UPDATE: arbitrary code execution via crafted flic... * SECURITY UPDATE: arbitrary code execution via crafted flic file - debian/patches/CVE-2010-3429.patch: add checks to libavcodec/flicvideo.c. - CVE-2010-3429 * SECURITY UPDATE: arbitrary code execution via crafted wmv file (LP: #690169) - debian/patches/CVE-2010-3908.patch: properly calculate size in libavcodec/utils.c. - CVE-2010-3908 * SECURITY UPDATE: denial of service via crafted .ogg file - debian/patches/CVE-2010-4704.patch: validate codebook in libavcodec/vorbis_dec.c. - CVE-2010-4704 * SECURITY UPDATE: denial of service and possible code execution via crafted WebM file - debian/patches/CVE-2011-0480.patch: check rangebits in libavcodec/vorbis_dec.c. - CVE-2011-0480 * SECURITY UPDATE: arbitrary code execution via crafted RealMedia file (LP: #690169) - debian/patches/CVE-2011-0722.patch: set dimensions in libavcodec/rv34.c. - CVE-2011-0722 * SECURITY UPDATE: denial of service and possible code execution via crafted VC1 file (LP: #690169) - debian/patches/CVE-2011-0723.patch: fix invalid reads in libavcodec/vc1dec.c. - CVE-2011-0723	Marc Deslauriers	4:0.5.1-1ubuntu1.1	13 years ago
42	* merge from debian. remaining changes: * merge from debian. remaining changes: - don't disable encoders - don't build against libfaad, libdirac and libopenjpeg (all in universe)	Reinhard Tartler	4:0.5.1-1ubuntu1	14 years ago
41	* tighten build dependency on new x264 package * tighten build dependency on new x264 package * add x264 backport for ffmpeg 0.5 * install presets in 'libavcodec package' instead of 'ffmpeg' binary, see git history for rationale of this change	Reinhard Tartler	4:0.5+svn20090706-5ubuntu2	14 years ago
40	* merge from debian, remaining changes: * merge from debian, remaining changes: - dont disable internal encoders - disabled extra depedencies (come with ffmpeg-extra) - libdirac - libopenjpeg	Reinhard Tartler	4:0.5+svn20090706-5ubuntu1	14 years ago
39	add build dependency on 'yasm', since it is now moved to mai... add build dependency on 'yasm', since it is now moved to main.	Reinhard Tartler	4:0.5+svn20090706-2ubuntu4	14 years ago
38	* security backports from ffmpeg trunk (Closes: #550442) * security backports from ffmpeg trunk (Closes: #550442) - libavcodec/mpegaudiodec - libavcodec/vorbis_dec - libavcodec/ffv1 - libavcodec/vp3 - libavcodec/h264 - libavformat/mov - libavformat/oggdec - libavformat/oggparsevorbis	Reinhard Tartler	4:0.5+svn20090706-2ubuntu3	14 years ago
37	[ Reinhard Tartler ] [ Reinhard Tartler ] * Make arguments of av_set_pts_info() unsigned. * update debian/changelog * use patch for issue1245 from git.ffmpeg.org * Support constant-quant encoding for libtheora, LP: #356322 * increase swscale compile time width (VOF/VOFW), LP: #443264 [ Loïc Minier ] * Update config for karmic's armel toolchain. * Enable neon flavour; LP: #383240. * Update NEON confflags to assume v7 and VFP. * Add backported NEON patches from ffmpeg trunk; see debian/patches/neon/. * Pass proper --cpu and --extra-flags on armel. * Pass -fPIC -DPIC to neon pass.	Loïc Minier	4:0.5+svn20090706-2ubuntu2	14 years ago
36	* merge from debian. Remaining changes: * merge from debian. Remaining changes: - disabled output decoders: faad, openjpeg, dirac (all not in main) - build arm vfp variant - don't build depend on yasm. * fix dependencies on -extra packages: LP: #418705, #416348 * no need to remove mpeg encoders in the ubuntu package, unless we hear otherwise from some patent owner. This brings back the mpeg2video encoder is available. cf. formats.txt.gz LP: #416585	Reinhard Tartler	4:0.5+svn20090706-2ubuntu1	14 years ago
35	update the dependencies of the -dev packages for the update the dependencies of the -dev packages for the unstripped -> extra renaming	Reinhard Tartler	4:0.5+svn20090706-1ubuntu3	14 years ago
34	really drop libopenjpeg from build depends. really drop libopenjpeg from build depends.	Reinhard Tartler	4:0.5+svn20090706-1ubuntu2	14 years ago
33	* merge from debian. Remaining changes: * merge from debian. Remaining changes: - don't build-depend on libfaad-dev, disabling faad decoder. - build arm vfp variant - don't build libopenjpeg support (not in main) * change shlibs file to make applications depend on the -extra- packages. * don't build depend on yasm.	Reinhard Tartler	4:0.5+svn20090706-1ubuntu1	14 years ago
32	* don't build against faac in any case, it is deemed non-fre... * don't build against faac in any case, it is deemed non-free * update debian/changelog * enable libopenjpeg support for the multiverse package	Reinhard Tartler	4:0.5+svn20090609-2+unstripped2	14 years ago
31	* brown paperbag upload * brown paperbag upload * add missing comma in build depends	Reinhard Tartler	4:0.5+svn20090609-2+unstripped1	14 years ago
30	* prepare new upload * prepare new upload * update gbp.conf * move gbp.conf to debian/ * regroup build dependencies to minimize the diff	Reinhard Tartler	4:0.5+svn20090609-1ubuntu1+unstripped1	14 years ago
29	merge from ubuntu.jaunty branch merge from ubuntu.jaunty branch	Reinhard Tartler	3:0.svn20090303-1ubuntu2+unstripped1	15 years ago

Older »