mplayer (2:1.0~rc1-0ubuntu13.2) gutsy-security; urgency=low * SECURITY UPDATE: buffer overruns in RMMF, CDDB, MOV demuxer, FLAC header parser, and URL parser. (LP: #191488) * stream/librtsp/rtsp_session.c, stream/realrtsp/rmff.c, stream/realrtsp/rmff.h, libmpdemux/demux_audio.c, libmpdemux/demux_mov.c, stream/stream_cddb.c, stream/url.c: Patches from upstream. * References: - CVE-2008-0225 - CVE-2008-0238 - CVE-2008-0485 - CVE-2008-0486 - CVE-2008-0629 - CVE-2008-0630 -- William Grant Sat, 08 Mar 2008 21:14:04 +1100 mplayer (2:1.0~rc1-0ubuntu13.1) gutsy-security; urgency=low * SECURITY UPDATE: buffer overrun in mpdemux code (LP: #140891). * libmpdemux/aviheader.c: Apply upstream patch. * References: - CVE-2007-4938 -- William Grant Tue, 06 Nov 2007 17:20:30 +1100 mplayer (2:1.0~rc1-0ubuntu13) gutsy; urgency=low * 01_default_config.dpatch: Fix typo that prevent the screensaver to be disabled (LP: #152080) -- Laurent Bigonville Sat, 13 Oct 2007 14:28:11 +0200 mplayer (2:1.0~rc1-0ubuntu12) gutsy; urgency=low * Add 01_default_config.dpatch. - Sets screensaver by default for non gmplayer. (LP: #95038), (LP: #139770) - Sets xv as video output for gmplayer and mplayer. (LP: #65165), (LP: #146307) * Add dpatch to build-depends in debian/control. * Add dpatch support to debian/rules. -- Mario Limonciello Mon, 08 Oct 2007 01:07:53 -0500 mplayer (2:1.0~rc1-0ubuntu11) gutsy; urgency=low * Added Network Audio System (NAS) support (LP: #110151) -- Alfredo Matos Thu, 07 Jun 2007 21:53:04 +0100 mplayer (2:1.0~rc1-0ubuntu10) gutsy; urgency=low * SECURITY UPDATE: Upstream fix for CVE 2007-2948. Fixes a buffer overrun in the cddb code. (LP: #118855) -- William Grant Wed, 06 Jun 2007 17:22:22 +1000 mplayer (2:1.0~rc1-0ubuntu9) feisty; urgency=low * Rebuild to get correct version of libdirectfb * Modified Maintainer value to match Debian-Maintainer-Field Spec -- Sarah Hobbs Mon, 9 Apr 2007 21:55:23 +1000 mplayer (2:1.0~rc1-0ubuntu8) feisty; urgency=low * Fix some formatting in our patches. * etc/examples.conf: - Add ac=mad, to use libmad as first choice. * debian/rules: - Reenable mp3lib again... *sigh* -- Christian Bjälevik Mon, 12 Mar 2007 03:42:49 +0100 mplayer (2:1.0~rc1-0ubuntu7) feisty; urgency=low [ Christian Bjälevik ] * debian/rules: - Add --disable-mp3lib to actually disable the damn thing. * DOCS/man/en/mplayer.1: - Remove documentation about -vo aa:help (LP: #43301). * Various files (see bzr diff for info): - Apply patch taken from Mandriva CVS (LP: #53947) to use dbus for disabling gnome-screensaver. [ William Grant ] * Enable LADSPA (LP: #67400) - Add ladspa-sdk to Build-Depends. -- Christian Bjälevik Sun, 11 Mar 2007 05:43:02 +0100 mplayer (2:1.0~rc1-0ubuntu6) feisty; urgency=low * debian/rules: - Disable mp3lib and enable mad (LP: #85751). * debian/control: - Add libmad0-dev to Build-Deps. -- Christian Bjälevik Sat, 10 Mar 2007 11:05:40 +0100 mplayer (2:1.0~rc1-0ubuntu5) feisty; urgency=low * SECURITY UPDATE: DirectShow decoder heap overflow. * loader/dshow/DS_VideoDecoder.c: added upstream fix. * References http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072 -- Kees Cook Fri, 9 Mar 2007 08:52:34 -0800 mplayer (2:1.0~rc1-0ubuntu4) feisty; urgency=low * SECURITY UPDATE: DMO decoder heap overflow. * loader/dmo/DMO_VideoDecoder.c: added upstream fix. * References http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204 CVE-2007-1246 -- Kees Cook Tue, 6 Mar 2007 15:21:26 -0800 mplayer (2:1.0~rc1-0ubuntu3) feisty; urgency=low * debian/rules: - Add --enable-mp3lib to CONFIGURE_AUDIO_CODECS (LP: #83580). - Remove --disable-mp3lib. This one took some time to find. -- Christian Bjälevik Tue, 6 Feb 2007 19:47:34 +0100 mplayer (2:1.0~rc1-0ubuntu2) feisty; urgency=low * debian/rules: - Add --enable-libvorbis to CONFIGURE_AUDIO_CODECS. * debian/{compat,control}: - Bump Standard-Versions and debhelper >=. * Applied patch from: http://0pointer.de/public/mplayer-pulse.patch and adapted it for our current mplayer. Closes: #83493. * debian/{control,rules} - Add Build-Deps on libpulse-dev and --enable-pulse. -- Christian Bjälevik Tue, 6 Feb 2007 07:19:34 +0100 mplayer (2:1.0~rc1-0ubuntu1) feisty; urgency=low * New upstream version. * Apply RTSP buffer overflow fix patch from upstream. * Remove --enable-{vorbis,x264} and s/internal-tremor/tremor-internal/ in debian/rules. The defaults are detected properly, and forcing x264 now causes it to FTBFS. * Remove DOCS/it from dh_installdocs. Aforementioned directory no longer exists. -- William Grant Sun, 4 Feb 2007 15:04:46 +1100 mplayer (2:0.99+1.0pre8-0ubuntu8) edgy; urgency=low * No-change rebuild against newer libx264-dev (affects Ubuntu: #63842), - RC freeze exception granted by Andrew Mitchell. -- Daniel T Chen Thu, 12 Oct 2006 17:07:36 -0400 mplayer (2:0.99+1.0pre8-0ubuntu7) edgy; urgency=low * libvo/osd_template.c: - Add patch from Ubuntu #62209 to fix AMD64 FTBFS. Thanks Andreas Schultz. -- Christian Bjälevik Tue, 26 Sep 2006 15:15:27 +0200 mplayer (2:0.99+1.0pre8-0ubuntu6) edgy; urgency=low * debian/preinst: - Remove codecs.conf if it exists on the system (thanks Johan Kiviniemi). -- Christian Bjälevik Fri, 22 Sep 2006 20:45:08 +0200 mplayer (2:0.99+1.0pre8-0ubuntu5) edgy; urgency=low * configure: - Revert "if cygwin", we don't want to care changes like that. * etc/example.conf: - Revert vo and make "ao=alsa,". That means prefer alsa and then auto-detect the rest. * libmpcodecs/ve_lavc.c: - Revert our changes. We build against internal ffmpeg again. * debian/control: - Dropped dpatch and libmad0-dev as Build-Deps. - Drop all dummy packages and fix Conflicts/Replaces. - Dropped the field Uploaders. Useless for Ubuntu. - Dropped libavcodec-dev, libavformat-dev, libpostproc-dev from Build-Deps. * debian/rules: - Stop copying config.{guess,sub}, this just add bloat to the diff. - Use --with-codecsdir instead of setting the same for win32, xanim and real. Also drop --enable-{win32,real}, they are implied by --with-codecsdir and enabled on all arches now. - Drop defaults (--datadir and --disable-external-faad). - Dropped libmad, the other two mp3-decoders should be enough. - --enable-dshow was dropped upstream. - Stop installing codecs.conf. - Build against internal ffmpeg. -- Christian Bjälevik Thu, 21 Sep 2006 14:18:44 +0200 mplayer (2:0.99+1.0pre8-0ubuntu4) edgy; urgency=low * debian/control, debian/rules: + Use the system's libavcodec, libavformat and libpostproc * debian/rules: + Add hack to enable more runtime-detected CPU optimizations on i386 * debian/control: + Build-Depend on libx264-dev (>= 1:0.cvs20060720) to get a compatible version * debian/rules: + disable internal mp3lib. This will enable mad or ffmpeg as replacement (Ubuntu: #52729) * libmpcodecs/ve_lavc.c: + remove stuff that uses a newer libavcodec API than we have * libmpcodecs/ve_x264.c: + fix from upstream svn to build against our latest libx264 -- Sebastian Dröge Sun, 23 Jul 2006 13:33:53 +0200 mplayer (2:0.99+1.0pre8-0ubuntu3) edgy; urgency=low * Remove a broken newline in debian/rules to really build with i586 as target -- Sebastian Dröge Sat, 8 Jul 2006 19:50:53 +0200 mplayer (2:0.99+1.0pre8-0ubuntu2) edgy; urgency=low * Don't use --enable-vidix on powerpc. This parameter doesn't exist anymore -- Sebastian Dröge Sat, 8 Jul 2006 19:28:42 +0200 mplayer (2:0.99+1.0pre8-0ubuntu1) edgy; urgency=low * converted to bzr * dropped dpatch, converted them all to bzr branches * remerged all missing branches, except 57_demuxer_heap_overflow, which has been merged upstream * revert nsv-support patch, due to syntax error in codecs.conf -- Reinhard Tartler Sat, 8 Jul 2006 15:05:34 +0200 mplayer (2:0.99+1.0pre8-0ubuntu0) UNRELEASED; urgency=low * unreleased testversion * new upstream version + far too many changes to list here * disabled dpatches temporarily: -04_ubuntu-branding.dpatch -57_demuxer_heap_overflow -06_close_gracefully.dpatch -- Reinhard Tartler Sat, 8 Jul 2006 12:03:40 +0200 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu8) dapper; urgency=low * 07_hig-compliant-desktop-file.dpatch: - Use a more HIG compliant name for mplayer in the .desktop file. Thanks to Matthew East for the patch (Ubuntu: #38205) * 08_nsv-support.dpatch: - Add support for specific NSV files. Thanks to Dana Olson for the patch. (Ubuntu: #44831) -- Sebastian Dröge Mon, 15 May 2006 22:22:34 +0200 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu7) dapper; urgency=low * debian/patches/06_close_gracefully.dpatch: + Close gracefully when closing the mplayer window (Ubuntu: #38737) -- Sebastian Dröge Wed, 10 May 2006 16:04:56 +0200 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu6) dapper; urgency=low * add libx264-dev to builddeps and activate that in debian rules Thanks to Yagisan (Closes: M#31519) * disable external faad (Closes: M#33828) * add some of the script which upstream distributs in TOOLS/ to /usr/share/doc/mplayer/examples. Please report bugs if you want additional scripts added there. -- Reinhard Tartler Sat, 25 Mar 2006 19:14:02 +0100 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu5) dapper; urgency=low * [SECURITY]: Fix heap overflow in libmpdemux/demuxer.h. Patch retrieved from upstream CVS courtesy of Dennis Kaarsemaker. * References - CVE-2006-0579 - http://bugs.gentoo.org/show_bug.cgi?id=122029 -- Daniel T Chen Sat, 25 Feb 2006 23:19:46 -0800 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu4) dapper; urgency=low * added 05_gnome-screensaver-handling.dpatch to add support for gnome-screensaver to the -stop-xscreensaver option -- Oliver Grawert Sat, 25 Feb 2006 20:52:36 +0100 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu3) dapper; urgency=low * Add support for real codecs on powerpc (Closes Malone: #29190) -- Sebastian Dröge Sat, 18 Feb 2006 11:05:18 +0100 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu2) dapper; urgency=low * enable libaa and libcaca support - enable in debian/rules - fix configure to link mplayer with -laa (update 03_fix-linking.dpatch) -- Reinhard Tartler Tue, 24 Jan 2006 01:31:46 +0100 mplayer (2:0.99+1.0pre7try2+cvs20060117-0ubuntu1) dapper; urgency=low * New CVS snapshot * Improved Ubuntu branding by using the version from the changelog instead of the default "dev-CVS--Ubuntu-4.0.3" -- Sebastian Dröge Tue, 17 Jan 2006 08:21:48 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu7) dapper; urgency=low * Revert last change... I see no way how win32 support could ever work with a 64bit binary on amd64 but when someone has a patch to enable it please send it to me -- Sebastian Dröge Fri, 9 Dec 2005 17:50:36 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu6) dapper; urgency=low * Enable win32 support for amd64 (thanks fabbione) :) -- Sebastian Dröge Thu, 8 Dec 2005 23:04:07 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu5) dapper; urgency=low * Don't install the mencoder manpage in the mplayer package to prevent a conflict -- Sebastian Dröge Thu, 8 Dec 2005 19:35:18 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu4) dapper; urgency=low * Don't install .libdeps in examples * Install {input,codecs,menu}.conf to /etc/mplayer where we had them before -- Sebastian Dröge Thu, 8 Dec 2005 19:15:39 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu3) dapper; urgency=low * Stop having mplayer conflict with the mplayer-$arch transitional packages, so the transition can actually happen correctly. -- Adam Conrad Thu, 8 Dec 2005 15:43:58 +1100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu2) dapper; urgency=low * Add dummy packages for the mplayer-$arch packages we had before * Patch away the CPU runtime detection warning -- Sebastian Dröge Wed, 7 Dec 2005 15:39:24 +0100 mplayer (2:0.99+1.0pre7try2+cvs20051205-0ubuntu1) dapper; urgency=low * Initial release. * Completly repackaged * Based on ffmpeg/mplayer CVS 2005-12-05 * debian/patches/01_configure.dpatch: fixes live.com bulding. the patch is taken from Marillat's mplayer package * debian/patches/02_mplayer.conf.dpatch: use a better suited config for ubuntu -- Sebastian Dröge Wed, 05 Dec 2005 14:43:37 +0100