~ubuntu-branches/ubuntu/maverick/ffmpeg/maverick-security : changes

~ubuntu-branches/ubuntu/maverick/ffmpeg/maverick-security » Changes from revision 54

From Revision 54 to 35

Rev	Summary	Authors	Tags	Date
54	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via malformed Matroska file - debian/patches/CVE-2011-3504.patch: verify memory allocation failures in libavformat/matroskadec.c. - CVE-2011-3504 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing QDM2 stream - debian/patches/CVE-2011-4351.patch: check boundaries in libavcodec/qdm2.c. - CVE-2011-4351 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing VP3 stream - debian/patches/CVE-2011-4352.patch: check coefficient index in libavcodec/vp3.c. - CVE-2011-4352 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing VP5 or VP6 streams - debian/patches/CVE-2011-4353.patch: check indexes in libavcodec/vp5.c and libavcodec/vp6.c. - CVE-2011-4353 * SECURITY UPDATE: denial of service and possible code execution via malformed VMD file - debian/patches/CVE-2011-4364.patch: properly check lengths in libavcodec/vmdav.c. - CVE-2011-4364 * SECURITY UPDATE: denial of service and possible code execution via malformed file containing svq1 stream - debian/patches/CVE-2011-4579.patch: set dimensions after they have changed in libavcodec/svq1dec.c. - CVE-2011-4579	Marc Deslauriers	4:0.6-2ubuntu6.3	12 years ago
53	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via malformed OGG file - debian/patches/CVE-2011-1196.patch: revalidate index when necessary in libavformat/oggdec.c. - CVE-2011-1196 * SECURITY UPDATE: denial of service and possible code execution via malformed AMV file - debian/patches/CVE-2011-1931.patch: don't change flags in libavcodec/sp5xdec.c. - CVE-2011-1931 * SECURITY UPDATE: denial of service via malformed APE file - debian/patches/CVE-2011-2161.patch: make sure there are frames in libavformat/ape.c. - CVE-2011-2161 * SECURITY UPDATE: arbitrary code execution via malformed CAVS file - debian/patches/CVE-2011-3362.patch: validate values in libavcodec/cavsdec.c. - CVE-2011-3362	Marc Deslauriers	4:0.6-2ubuntu6.2	12 years ago
52	* SECURITY UPDATE: denial of service via crafted .ogg file * SECURITY UPDATE: denial of service via crafted .ogg file - debian/patches/fix-CVE-2010-4704.patch: validate codebook in libavcodec/vorbis_dec.c. - CVE-2010-4704 * SECURITY UPDATE: denial of service and possible code execution via crafted WebM file - debian/patches/fix-CVE-2011-0480.patch: check rangebits in libavcodec/vorbis_dec.c. - CVE-2011-0480 * SECURITY UPDATE: denial of service and possible code execution via crafted VC1 file (LP: #690169) - debian/patches/fix-CVE-2011-0723.patch: fix invalid reads in libavcodec/vc1dec.c. - CVE-2011-0723	Marc Deslauriers	4:0.6-2ubuntu6.1	13 years ago
51	fix dependency on libswscale-extra-0, LP: #637895 fix dependency on libswscale-extra-0, LP: #637895	Reinhard Tartler	4:0.6-2ubuntu6	13 years ago
50	Add flic video patch. Fixes CVE-2010-3429 Add flic video patch. Fixes CVE-2010-3429	Reinhard Tartler	4:0.6-2ubuntu5	13 years ago
49	Configure with --enable-pic on powerpc. LP: #654666. Configure with --enable-pic on powerpc. LP: #654666.	Matthias Klose	4:0.6-2ubuntu4	13 years ago
48	add libxfixes-dev to build-depends, LP: #631103 add libxfixes-dev to build-depends, LP: #631103	Dominic Evans	4:0.6-2ubuntu3	13 years ago
47	weaken the dependencies for the -extra package weaken the dependencies for the -extra package	Reinhard Tartler	4:0.6-2ubuntu2	13 years ago
46	* merge from debian/experimental. remaining changes: * merge from debian/experimental. remaining changes: - don't disable encoders - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe)	Reinhard Tartler	4:0.6-2ubuntu1	13 years ago
45	* merge from debian/experimental. remaining changes: * merge from debian/experimental. remaining changes: - don't disable encoders - don't build against libfaad, libdirac and libopenjpeg (all in universe) * new upstream release - internal vorbis encoder is disabled. LP: #585330 - includes native AMR-NB decoder, LP: #93849 - api-example is fixed: LP: #557319	Reinhard Tartler	4:0.6-1ubuntu1	13 years ago
44	* add proper replaces, fixes: LP: #587369 * add proper replaces, fixes: LP: #587369 * fix typo in dependency on libavfilter-extra-1. LP: #587431	Reinhard Tartler	4:0.6~svn20100505-1ubuntu2	13 years ago
43	* merge from debian/experimental. remaining changes: * merge from debian/experimental. remaining changes: - don't disable encoders - don't build against libfaad, libdirac and libopenjpeg (all in universe)	Reinhard Tartler	4:0.6~svn20100505-1ubuntu1	13 years ago
42	* merge from debian. remaining changes: * merge from debian. remaining changes: - don't disable encoders - don't build against libfaad, libdirac and libopenjpeg (all in universe)	Reinhard Tartler	4:0.5.1-1ubuntu1	14 years ago
41	* tighten build dependency on new x264 package * tighten build dependency on new x264 package * add x264 backport for ffmpeg 0.5 * install presets in 'libavcodec package' instead of 'ffmpeg' binary, see git history for rationale of this change	Reinhard Tartler	4:0.5+svn20090706-5ubuntu2	14 years ago
40	* merge from debian, remaining changes: * merge from debian, remaining changes: - dont disable internal encoders - disabled extra depedencies (come with ffmpeg-extra) - libdirac - libopenjpeg	Reinhard Tartler	4:0.5+svn20090706-5ubuntu1	14 years ago
39	add build dependency on 'yasm', since it is now moved to mai... add build dependency on 'yasm', since it is now moved to main.	Reinhard Tartler	4:0.5+svn20090706-2ubuntu4	14 years ago
38	* security backports from ffmpeg trunk (Closes: #550442) * security backports from ffmpeg trunk (Closes: #550442) - libavcodec/mpegaudiodec - libavcodec/vorbis_dec - libavcodec/ffv1 - libavcodec/vp3 - libavcodec/h264 - libavformat/mov - libavformat/oggdec - libavformat/oggparsevorbis	Reinhard Tartler	4:0.5+svn20090706-2ubuntu3	14 years ago
37	[ Reinhard Tartler ] [ Reinhard Tartler ] * Make arguments of av_set_pts_info() unsigned. * update debian/changelog * use patch for issue1245 from git.ffmpeg.org * Support constant-quant encoding for libtheora, LP: #356322 * increase swscale compile time width (VOF/VOFW), LP: #443264 [ Loïc Minier ] * Update config for karmic's armel toolchain. * Enable neon flavour; LP: #383240. * Update NEON confflags to assume v7 and VFP. * Add backported NEON patches from ffmpeg trunk; see debian/patches/neon/. * Pass proper --cpu and --extra-flags on armel. * Pass -fPIC -DPIC to neon pass.	Loïc Minier	4:0.5+svn20090706-2ubuntu2	14 years ago
36	* merge from debian. Remaining changes: * merge from debian. Remaining changes: - disabled output decoders: faad, openjpeg, dirac (all not in main) - build arm vfp variant - don't build depend on yasm. * fix dependencies on -extra packages: LP: #418705, #416348 * no need to remove mpeg encoders in the ubuntu package, unless we hear otherwise from some patent owner. This brings back the mpeg2video encoder is available. cf. formats.txt.gz LP: #416585	Reinhard Tartler	4:0.5+svn20090706-2ubuntu1	14 years ago
35	update the dependencies of the -dev packages for the update the dependencies of the -dev packages for the unstripped -> extra renaming	Reinhard Tartler	4:0.5+svn20090706-1ubuntu3	14 years ago

Older »