~ubuntu-branches/ubuntu/trusty/libav/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/libav/trusty-security » Changes from revision 47

From Revision 47 to 28

Rev	Summary	Authors	Tags	Date
47	* SECURITY UPDATE: Updated to 9.20 to fix various crashes wi... * SECURITY UPDATE: Updated to 9.20 to fix various crashes with invalid-free, corrupted double-linked list or out-of-bounds read (LP: #1643467) - No CVE number	Marc Deslauriers	6:9.20-0ubuntu0.14.04.1	7 years ago
46	* Update to 9.18 to fix multiple security issues (LP: #14326... * Update to 9.18 to fix multiple security issues (LP: #1432610, LP: #1370175) - CVE-2013-7020 - CVE-2014-8542 - CVE-2014-8543 - CVE-2014-8544 - CVE-2014-8547 - CVE-2014-8548 - CVE-2014-9604	Marc Deslauriers	6:9.18-0ubuntu0.14.04.1	9 years ago
45	* New upstream release 9.14: * New upstream release 9.14: - vp3: Copy all 3 frames for thread updates (CVE-2011-3934) - mpegts: Do not try to write a PMT larger than SECTION_SIZE (CVE-2014-2263) - mpegts: Define the section length with a constant - error_concealment: avoid using the picture if not fully setup (CVE-2013-0860) - svq1: do not modify the input packet - cdgraphics: do not return 0 from the decode function - cdgraphics: switch to bytestream2 (CVE-2013-3674) - huffyuvdec: check width size for yuv422p (CVE-2013-0848) - mmvideo: check horizontal coordinate too (CVE-2013-3672) - wmalosslessdec: fix mclms_coeffs* array size (CVE-2014-2098) - lavc: Check the image size before calling get_buffer (CVE-2011-3935) - huffyuv: Check and propagate function return values (CVE-2013-0868) - h264: prevent theoretical infinite loop in SEI parsing (CVE-2011-3946) - h264_sei: check SEI size - pgssubdec: Check RLE size before copying (CVE-2013-0852) - fate: Add dependencies for dct/fft/mdct/rdft tests - video4linux2: Avoid a floating point exception - vf_select: Drop a debug av_log with an unchecked double to enum conversion - eamad: use the bytestream2 API instead of AV_RL (CVE-2013-0851)	Reinhard Tartler	6:9.16-0ubuntu0.14.04.1	9 years ago
44	* New upstream release 9.14: * New upstream release 9.14: - Many security fixes issues LP: #1341216 - adpcm: Write the proper predictor in trellis mode in IMA QT - adpcm: Avoid reading out of bounds in the IMA QT trellis encoder - Check mp3 header before calling avpriv_mpegaudio_decode_header() (bug/705) - Check if an mp3 header is using a reserved sample rate - lzo: Handle integer overflow (bug/704) - avconv: make -shortest work with streamcopy * Drop broken dpkg-maintscript, LP: #1315672	Reinhard Tartler	6:9.14-0ubuntu0.14.04.1	9 years ago
43	* Merge from unstable, remaining changes: * Merge from unstable, remaining changes: - build-depend on libtiff5-dev rather than libtiff4-dev, avoids FTBFS caused by imlib * New upstream release 9.13: - Many security fixes issues LP: #1277173 - swscale: Fix an undefined behaviour - matroska: add the Opus mapping - mp3enc: Properly write bitrate value in XING header (Closes: #736088) - origin/pu/9 oggdec: add support for Opus in Ogg demuxing (Fixes: libav/603, Closes: #720563) - apedec: do not buffer decoded samples over AVPackets (Closes: #744901) - isom: lpcm in mov default to big endian - movdec: handle 0x7fff langcode as macintosh per the specs - h264: reset next_output_pic earlier in start_frame() (Fixes: libav/672, Closes: #741240, LP: #1288206) - rtmpproto: Make sure to pass on the error code if read_connect failed - lavr: allocate the resampling buffer with a positive size - tiffdec: use bytestream2 to simplify overread/overwrite protection - resample: fix avresample_get_delay() return value - avi: Improve non-interleaved detection (Fixes: libav/666) - af_channelmap: fix ONE_STR mapping mode - movenc: allow override of "writing application" tag - matroskaenc: allow override of "writing application" tag - avfilter: Add missing emms_c when needed - build: Use pkg-config for openjpeg (Fixes: libav/387) - mpeg12: check scantable indices in all decode_block functions - sgidec: fix buffer size check in expand_rle_row() - adx: check that the offset is not negative - mpegvideo: set reference/pict_type on generated reference frames - h264: Fix various crashes found in samples pointed by Mateusz "j00ru" Jurczyk and Gynvael Coldwind - Thanks! * Rebuild is reported to fix vaapi, Closes: #745655 * Fix invocation of dpkg-maintscript helper, LP: #1315672 * cleanup leftovers of the former libav-source package * Simplify listing packages with dh_listpackage * Drop transitional arch:all -extra- packages * Bump standards version to 3.9.5, no changes needed	Reinhard Tartler	6:9.13-0ubuntu0.14.04.1	9 years ago
42	No-change rebuild for x264 soname bump. No-change rebuild for x264 soname bump.	Matthias Klose	6:9.11-2ubuntu2	10 years ago
41	* Merge from unstable, remaining changes: * Merge from unstable, remaining changes: - build-depend on libtiff5-dev rather than libtiff4-dev, avoids FTBFS caused by imlib * This version of libav supports Opus in Ogg (LP: #1265196)	Reinhard Tartler	6:9.11-2ubuntu1	10 years ago
40	Drop build-deps arch restriction for libav, bootstrap comple... Drop build-deps arch restriction for libav, bootstrap complete.	Dimitri John Ledkov	6:9.10-1ubuntu7	10 years ago
39	Disable altivec optimization for all build flavours on ppc64... Disable altivec optimization for all build flavours on ppc64*.	Dimitri John Ledkov	6:9.10-1ubuntu6	10 years ago
38	Build altivec flavor on powerpc only. Build altivec flavor on powerpc only.	Dimitri John Ledkov	6:9.10-1ubuntu5	10 years ago
37	Add altivec flavor build for ppc64,ppc64el. Add altivec flavor build for ppc64,ppc64el.	Dimitri John Ledkov	6:9.10-1ubuntu4	10 years ago
36	Specify --enable-pic for ppc64, ppc64el. Specify --enable-pic for ppc64, ppc64el.	Dimitri John Ledkov	6:9.10-1ubuntu3	10 years ago
35	Bootstrap libav on ppc64el. Bootstrap libav on ppc64el.	Dimitri John Ledkov	6:9.10-1ubuntu2	10 years ago
34	* Build all -extra flavors from this source package, as liba... * Build all -extra flavors from this source package, as libav got demoted from main to universe, cf LP: #1243235 * Simplify debian/rules to follow exactly the code that debian executes * New upstream (LP: #1180288) fixes lots of security issues (LP: #1242802) * Merge from unstable, remaining changes: - build-depend on libtiff5-dev rather than libtiff4-dev, avoids FTBFS caused by imlib - follow the regular debian codepaths	Reinhard Tartler	6:9.10-1ubuntu1	10 years ago
33	* debian/patches/{05-aarch64-support.patch,06-aarch64-pie.pa... * debian/patches/{05-aarch64-support.patch,06-aarch64-pie.patch}: - Backport basic aarch64 support from git.	William Grant	6:0.8.7-1ubuntu2	10 years ago
32	* Merge from debian/unstable, remaining changes: * Merge from debian/unstable, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, frei0r, vo-aacenc, vo-amrenc, x264, and xvid (all in universe) - do not build libav-extra-dbg, it is build from the libav-extra source package in ubuntu. - drop libav-regular-dbg, not necessary in ubuntu - Adjust LIB_PKGS/LIB_PKGS2 lists in debian/rules - several ifdefs in debian/rules that allow the use of the same file in libav and libav-extra (most of this can be merged into the debian package)	Jackson Doak	6:0.8.7-1ubuntu1	10 years ago
31	Put back the dh_strip invocations. Otherwise, no .ddebs will... Put back the dh_strip invocations. Otherwise, no .ddebs will be available at all.	Reinhard Tartler	6:0.8.6-1ubuntu2	11 years ago
30	* Merge from debian/unstable, LP: #1160734, remaining change... * Merge from debian/unstable, LP: #1160734, remaining changes: - don't build against libdirac, lame, libopenjpeg, librtmp, frei0r, vo-aacenc, vo-amrenc, x264, and xvid (all in universe) - do not build libav-extra-dbg, it is build from the libav-extra source package in ubuntu. - drop libav-regular-dbg, not necessary in ubuntu - Adjust LIB_PKGS/LIB_PKGS2 lists in debian/rules - several ifdefs in debian/rules that allow the use of the same file in libav and libav-extra (most of this can be merged into the debian package) * Tested that co-instability of libavcodec-dev with libavcodec-extra-53 works. LP: #1143929, #1101829 * Remove all debug packages. In ubuntu, we provide debug symbols via the .ddeb infrastructure.	Reinhard Tartler	6:0.8.6-1ubuntu1	11 years ago
29	* Update to 0.8.5 to fix multiple security issues. (LP: #110... * Update to 0.8.5 to fix multiple security issues. (LP: #1104019) - CVE-2012-2783 - CVE-2012-2791 - CVE-2012-2797 - CVE-2012-2798 - CVE-2012-2801 - CVE-2012-2802 - CVE-2012-2803 - CVE-2012-2804 - CVE-2012-5144	Marc Deslauriers	6:0.8.5-0ubuntu1	11 years ago
28	Weaken dependencies on -dev packages. LP: #1038781 Weaken dependencies on -dev packages. LP: #1038781	Reinhard Tartler	6:0.8.4-0ubuntu2	11 years ago

Older »