~ubuntu-branches/ubuntu/oneiric/libav/oneiric-security : changes

~ubuntu-branches/ubuntu/oneiric/libav/oneiric-security » Changes from revision 17

From Revision 17

Rev	Summary	Authors	Tags	Date
17	* SECURITY UPDATE: unspecified security issue in vp56.c (LP:... * SECURITY UPDATE: unspecified security issue in vp56.c (LP: #1104019) - debian/patches/CVE-2012-2783.patch: release frames on error in libavcodec/vp56.c. - CVE-2012-2783 * SECURITY UPDATE: unspecified security issue in Indeo (LP: #1104019) - debian/patches/CVE-2012-2791.patch: check that scan pattern is set before using it in libavcodec/ivi_common.c. - CVE-2012-2791 * SECURITY UPDATE: double free vulnerability in mpeg_decode_frame - debian/patches/CVE-2012-2803.patch: do not decode extradata more than once in libavcodec/mpeg12.c. - CVE-2012-2803 * SECURITY UPDATE: issue in AAC decoding - debian/patches/CVE-2012-5144.patch: fix off-by-one in libavcodec/aacdec.c. - CVE-2012-5144	Marc Deslauriers	4:0.7.6-0ubuntu0.11.10.3	11 years ago
16	* SECURITY UPDATE: unspecified security issue in ff_rv34_dec... * SECURITY UPDATE: unspecified security issue in ff_rv34_decode_frame - debian/patches/CVE-2012-2772.patch: error out on size changes with frame threading in libavcodec/rv34.c. - CVE-2012-2772 * SECURITY UPDATE: out of array write in quant_cof - debian/patches/CVE-2012-2775.patch: check opt_order in libavcodec/alsdec.c. - CVE-2012-2775 * SECURITY UPDATE: security issues in decode_pic - debian/patches/CVE-2012-2777-2784.patch: prevent changing w/h in libavcodec/cavsdec.c. - CVE-2012-2777 - CVE-2012-2784 * SECURITY UPDATE: unspecified vulnerability in the decode_frame - debian/patches/CVE-2012-2779.patch: prevent decoding happening on a half initialized context in libavcodec/indeo5.c. - CVE-2012-2779 * SECURITY UPDATE: out of array write in the decode_wdlt function - debian/patches/CVE-2012-2786.patch: check frame_end in libavcodec/dfa.c. - CVE-2012-2786 * SECURITY UPDATE: out of array read in avi_read_packet function - debian/patches/CVE-2012-2788.patch: use accurate size in libavformat/avidec.c. - CVE-2012-2788 * SECURITY UPDATE: unspecified vulnerability in avi_read_packet - debian/patches/CVE-2012-2789.patch: check num_vec_coeffs for validity in libavcodec/wmaprodec.c. - CVE-2012-2789 * SECURITY UPDATE: unspecified vulnerability in read_var_block_data - debian/patches/CVE-2012-2790.patch: fix number of decoded samples in libavcodec/alsdec.c. - CVE-2012-2790 * SECURITY UPDATE: unspecified vulnerability in lag_decode_zero_run_line - debian/patches/CVE-2012-2793.patch: check count before writing zeros in libavcodec/lagarith.c. - CVE-2012-2793 * SECURITY UPDATE: unspecified vulnerability in decode_mb_info - debian/patches/CVE-2012-2794.patch: check tile size in libavcodec/indeo5.c. - CVE-2012-2794 * SECURITY UPDATE: out of array write in decode_dds1 - debian/patches/CVE-2012-2798.patch: fix length check in libavcodec/dfa.c. - CVE-2012-2798 * SECURITY UPDATE: unspecified vulnerability in ff_ivi_process_empty_tile - debian/patches/CVE-2012-2800.patch: check tile sizes in libavcodec/ivi_common., libavcodec/indeo5.c. - CVE-2012-2800 SECURITY UPDATE: out of array writes in avs.c - debian/patches/CVE-2012-2801.patch: force dimensions in libavcodec/avs.c. - CVE-2012-2801	Marc Deslauriers	4:0.7.6-0ubuntu0.11.10.2	11 years ago
15	* Update to 0.7.6 to fix multiple security issues. (LP: #101... * Update to 0.7.6 to fix multiple security issues. (LP: #1012132) - CVE-2011-3929 - CVE-2011-3936 - CVE-2011-3940 - CVE-2011-3945 - CVE-2011-3947 - CVE-2011-3951 - CVE-2011-3952 - CVE-2011-4031 - CVE-2012-0848 - CVE-2012-0850 - CVE-2012-0851 - CVE-2012-0852 - CVE-2012-0853 - CVE-2012-0858 - CVE-2012-0859 - CVE-2012-0947	Marc Deslauriers	4:0.7.6-0ubuntu0.11.10.1	11 years ago
14	* Update to 0.7.3 to fix multiple security issues (LP: #9118... * Update to 0.7.3 to fix multiple security issues (LP: #911811): - SECURITY UPDATE: denial of service and possible code execution via malformed file containing QDM2 stream - CVE-2011-4351 - SECURITY UPDATE: denial of service and possible code execution via malformed file containing VP3 stream - CVE-2011-4352 - SECURITY UPDATE: denial of service and possible code execution via malformed file containing VP5 or VP6 streams - CVE-2011-4353 - SECURITY UPDATE: denial of service and possible code execution via malformed VMD file - CVE-2011-4364 - SECURITY UPDATE: denial of service and possible code execution via malformed file containing svq1 stream - CVE-2011-4579	Marc Deslauriers	4:0.7.3-0ubuntu0.11.10.1	12 years ago
13	* Merge from debian, remaining changes: * Merge from debian, remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg, lame, xvid, x264 (all in universe) - not installing into multiarch directories * This new upstream release has basically merged in all 70 patches that are present in 4:0.7.1-7ubuntu2, plus some additional, similarily focused ones.	Reinhard Tartler	4:0.7.2-1ubuntu1	12 years ago
12	Revert "Convert package to include multiarch support." Revert "Convert package to include multiarch support."	Reinhard Tartler	4:0.7.1-7ubuntu2	12 years ago
11	* Merge from debian/unstable * Merge from debian/unstable - don't build against libfaad, libdirac, librtmp and libopenjpeg, lame, xvid, x264 (all in universe) * Drop extra conflicts on libswscale-extra-1	Reinhard Tartler	4:0.7.1-3ubuntu1	12 years ago
10	libswscale-dev: fix alternate on libswscale-extra-2, Fixes L... libswscale-dev: fix alternate on libswscale-extra-2, Fixes LP: #829857	Reinhard Tartler	4:0.7.1-1ubuntu3	12 years ago
9	relax dependencies in the shlibs file to accomodate the new ... relax dependencies in the shlibs file to accomodate the new versioning scheme in libav-extra. Fixes LP: #818619	Reinhard Tartler	4:0.7.1-1ubuntu2	12 years ago
8	* Merge from debian/unstable * Merge from debian/unstable - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe) - Extra conflicts on libswscale-extra-1 (can be dropped after natty release)	Reinhard Tartler	4:0.7.1-1ubuntu1	12 years ago
7	Conflicts/Replaces against broken libswscale-extra-1 package... Conflicts/Replaces against broken libswscale-extra-1 package, LP: #804452	Reinhard Tartler	4:0.7-1ubuntu2	12 years ago
6	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe)	Reinhard Tartler	4:0.7-1ubuntu1	12 years ago
5	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe)	Reinhard Tartler	4:0.7~rc1-1ubuntu1	12 years ago
4	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe)	Reinhard Tartler	4:0.7~beta2-2ubuntu1	12 years ago
3	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe) - explicitly --enable-pic on powerpc, cf. LP #654666 - different arm configure bits that should probably better be merged into debian * Cherry-picked from git: - install doc/APIChanges and refer to them in NEWS.Debian (Closes: #623682) - don't try to install non-existing documentation, fixes FTBFS on powerpc	Reinhard Tartler	4:0.7~b1-1ubuntu1	12 years ago
2	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - don't build against libfaad, libdirac, librtmp and libopenjpeg (all in universe) - explicitly --enable-pic on powerpc, cf. LP #654666 - different arm configure bits that should probably better be merged into debian	Reinhard Tartler	4:0.6.2-1ubuntu1	13 years ago
1	Import upstream version 0.6.2 Import upstream version 0.6.2	Reinhard Tartler	upstream-0.6.2	13 years ago