faad2 (2.10.0-1) unstable; urgency=medium * New upstream version 2.10.0 * Bump Standards-Version to 4.5.0. * Drop "-Wl,--as-needed" linker flag. * Bump debhelper-compat to 13. * Add "usr/lib/${DEB_HOST_MULTIARCH}/*.la" to debian/not-installed. -- Fabian Greffrath Tue, 20 Oct 2020 21:45:18 +0200 faad2 (2.9.2-1) unstable; urgency=medium * New upstream version 2.9.2 * Install pkg-config file. * Rules-Requires-Root: no. -- Fabian Greffrath Mon, 04 May 2020 22:05:34 +0200 faad2 (2.9.1-1) unstable; urgency=medium [ Ondřej Nový ] * Bump Standards-Version to 4.4.1 [ Fabian Greffrath ] * New upstream version 2.9.1 -- Fabian Greffrath Mon, 04 Nov 2019 16:52:15 +0100 faad2 (2.9.0-1) unstable; urgency=medium [ Ondřej Nový ] * Use debhelper-compat instead of debian/compat [ Fabian Greffrath ] * Ack NMUs, thanks Hugo! * Upstream moved to GitHub, adapt packaging accordingly. * New upstream version 2.9.0. * Remove all patches, applied upstream. * Build reproducibly. * Finish debug symbols package migration. * Bump debhelper-compat to 12. * Bump Standards-Version to 4.4.0. * Add Build-Depends-Package line to the symbols file. -- Fabian Greffrath Wed, 11 Sep 2019 20:28:04 +0200 faad2 (2.8.8-3.2) unstable; urgency=high * Non-maintainer upload with maintainer's permission. * debian/patches/gcc-9.patch: Fix build with GCC-9 (thanks Gianfranco Costamagna for the patch) (Closes: #930363). -- Hugo Lefeuvre Sat, 31 Aug 2019 09:11:54 -0400 faad2 (2.8.8-3.1) unstable; urgency=medium * Non-maintainer upload with maintainer's permission. * CVE-2019-6956: Buffer over read in the function ps_mix_phase() (libfaad/ps_dec.c) (Closes: #914641). * CVE-2018-20196: Stack buffer overflow in the function calculate_gain (libfaad/sbr_hfadj.c). * CVE-2018-20199, CVE-2018-20360: NULL pointer dereference in the function ifilter_bank (libfaad/filtbank.c). -- Hugo Lefeuvre Tue, 27 Aug 2019 13:29:39 -0400 faad2 (2.8.8-3) unstable; urgency=high * Team upload. * debian/patches: Cherry-pick patch to fix buffer overflows from VLC. -- Sebastian Ramacher Fri, 07 Jun 2019 20:07:34 +0200 faad2 (2.8.8-2) unstable; urgency=medium [ Ondřej Nový ] * d/copyright: Change Format URL to correct one * d/control: Set Vcs-* to salsa.debian.org * d/changelog: Remove trailing whitespaces [ Felipe Sateler ] * Change maintainer address to debian-multimedia@lists.debian.org [ Ondřej Nový ] * d/watch: Use https protocol [ Fabian Greffrath ] * Backport two patches from upstream to fix CVE-2018-20194 and CVE-2018-20362, thanks Hugo Lefeuvre. -- Fabian Greffrath Wed, 17 Apr 2019 11:50:29 +0200 faad2 (2.8.8-1) unstable; urgency=medium * New upstream version 2.8.8 -- Fabian Greffrath Mon, 18 Dec 2017 21:28:02 +0100 faad2 (2.8.6-1) unstable; urgency=medium * New upstream version 2.8.6 -- Fabian Greffrath Mon, 06 Nov 2017 17:05:46 +0100 faad2 (2.8.5-1) unstable; urgency=medium * New upstream version 2.8.5 * Remove faad2_version.patch, upstream has changed the FAAD2_VERSION macro to read 'unknown'. * Refresh reproducible-build.patch. * Add the NeAACDecGetVersion@Base symbol to the libfaad2.symbols file, this function is supposed to be used to get the FAAD2 library version at runtime. * Update debian/copyright for recently added or removed source files. * Bump Standards-Version to 4.1.0. -- Fabian Greffrath Sat, 30 Sep 2017 14:29:31 +0200 faad2 (2.8.1-2) unstable; urgency=medium * Set the FAAD2_VERSION macro back to the version string, thanks Adrian Bunk (Closes: #868854). + In the next upstream release this macro will read "unknown version" and an API will be provided to retrieve the actual library version at run-time. -- Fabian Greffrath Wed, 02 Aug 2017 20:46:57 +0200 faad2 (2.8.1-1) unstable; urgency=medium * New upstream version 2.8.1. + Fixes multiple vulnerabilities: CVE-2017-9218, CVE-2017-9219, CVE-2017-9220, CVE-2017-9221, CVE-2017-9222, CVE-2017-9223, CVE-2017-9253, CVE-2017-9254, CVE-2017-9255, CVE-2017-9256, CVE-2017-9257 (Closes: #867724). * Update debian/watch file. * Refresh reproducible-build.patch. * Remove debian/README.source and debian/gbp.conf files, they do not apply anymore. * Bump Standards-Version to 4.0.0. * Bump debhelper compat to 10. * Fix vcs-field-uses-insecure-uri lintian warnings. * Enable all hardening flags. * Update debian/copyright, refer to MPL-1.1 in common-licenses. * Drop obsolete faad2-dbg package. -- Fabian Greffrath Mon, 17 Jul 2017 22:25:26 +0200 faad2 (2.8.0~cvs20161113-1) unstable; urgency=medium * New upstream CVS snapshot. + Fixes implicit SBR detection via AudioSpecificConfig on systems with unsigned char (Closes: #843173). * Change Uploaders field to use my Debian account. -- Fabian Greffrath Sun, 13 Nov 2016 17:45:15 +0100 faad2 (2.8.0~cvs20150510-1) unstable; urgency=medium * New upstream CVS snapshot. + Does not crash when given ADTS AAC file with large ID3v2 tag anymore, thanks Mike Crowe for the bug report and patch (Closes: #689712). + Does not crash with the Mayhem testcase anymore, thanks Alexandre Rebert for the bug report (Closes: #715882). * Add debian/README.source to document how the Debian source tarball was created and force xz compression in debian/gbp.conf. * Remove all patches that were either applied, solved differently or disapproved upstream: + autotools-compat.patch: Disapproved upstream. + noinst-mp4ff.patch: Applied upstream. + manpage.patch: Applied upstream. + incorrect_pointer_size.patch: Does not apply anymore. + bpa-stdin.patch: Applied upstream. + path_max.patch: Applied upstream. + fix_ftbfs_with_gcc4.5.patch: Disapproved upstream. + symbol-visibility.patch: Does not apply anymore. + libfaad-drm.patch: Applied upstream. * Ship upstream's own frontend and API documentation manpages. * Update Debian packaging copyright years. * Remove '__DATE__' CPP macro for reproducible builds. -- Fabian Greffrath Mon, 11 May 2015 13:59:49 +0200 faad2 (2.7-9) unstable; urgency=medium * Build the DRM version of the library as well as the normal version, thanks Julian Cable for the idea and the patch! * Remove Andres Mejia from Uploaders (Closes: #743545). * Remove "DM-Upload-Allowed" field from debian/control. * Mark the faad2-dbg package as "Multi-Arch: same" and remove faad ("Multi-Arch: no") from its Dependencies. * Remove debian/source/local-options, they are default now. * Add faad.lintian-overrides for a spelling error that is used in the id3 specification. * Fix "vcs-field-not-canonical" lintian warning. * Fix "'visibility' attribute ignored on non-class types" compiler warnings introduced by our symbol versioning patch. * Fix most autotools warnings. * Bump "Standards-Version" to 3.9.6. * Run "wrap-and-sort -asb". * Add extensive API documentation in libfaad.3, courtesy of Julian Cable. -- Fabian Greffrath Thu, 30 Apr 2015 18:04:42 +0200 faad2 (2.7-8) unstable; urgency=low [ Fabian Greffrath ] * debian/patches/path_max.patch: + Dynamically allocate file name buffers, instead of relying on PATH_MAX. * Set appropriate symbol visibility attributes. * Rebuild autofoo with dh-autoreconf. * Add debian/libfaad2.symbols file. * Multi-Archify. * Remove redundant license blurb from debian/copyright. * libmp4ff ist not packaged, so do not install it either. * Simplify debian/*.install accordingly. [ Andres Mejia ] * Make dev package multiarch installable. * Bump to Standards-Version 3.9.3. -- Andres Mejia Sun, 18 Mar 2012 09:07:55 -0400 faad2 (2.7-7) unstable; urgency=low [ Andres Mejia ] * Update to my @debian.org email. * Update gbp.conf. [ Reinhard Tartler ] * Update Vcs-Browser field * bump standards version (no changes needed) [ Fabian Greffrath ] * Convert to 3.0 (quilt) source format. * Re-enable two patches that got lost in the 2.7-6 upload: - debian/patches/bpa-stdin.patch + Apply SqueezeCenter patches from FreeBSD that enable streaming with BBCiPlayer and ezstream (LP: #470562). - debian/patches/path_max.patch + Extend file name buffers for longer path names (LP: #475050). * Merge patch from 2.7-6ubuntu1: - debian/patches/fix_ftbfs_with_gcc4.5.patch + Correctly declare lrintf in libfaad/common.h to avoid a conflict of declaration in mathcalls.h to fix FTBFS on i386 * Improve debian/copyright. -- Fabian Greffrath Wed, 03 Aug 2011 14:19:49 +0200 faad2 (2.7-6) unstable; urgency=high [ Alessio Treglia ] * Fix segmentation fault in faad due to an incorrect pointer size (Closes: #603807, LP: #665802). * Add gbp config file. [ Andres Mejia ] * Revert changes in 2.7-5. Upload of 2.7-5 was unintentionally done. * Refresh patches. -- Andres Mejia Mon, 22 Nov 2010 19:17:36 -0500 faad2 (2.7-5) unstable; urgency=low * Update my e-mail address. * Apply SqueezeCenter patches from FreeBSD that enable streaming with BBCiPlayer and ezstream (LP: #470562). * Extend file name buffers for longer path names (LP: #475050). -- Fabian Greffrath Mon, 16 Aug 2010 16:43:14 +0200 faad2 (2.7-4) unstable; urgency=low * debian/control: Do not build the shared libmp4ff library packages anymore (Closes: #550679). The use of mp4ff from faad2 is discouraged by upstream, see . * Removed debian/patches/force-include-stdint_h.patch. * Removed debian/patches/libmp4ff-shared-lib.patch. * Removed debian/patches/70_automake-1.9.patch. * Added debian/README.source. * Bumped Standards-Version to 3.8.3. * Raised Build-Depends to debhelper (>= 7.0.50~), thanks lintian. * Removed debian/libmp4ff-dev.install and debian/libmp4ff0.install. * Removed libmp4ff0 from Depends for faad2-dbg. -- Fabian Greffrath Mon, 26 Oct 2009 12:04:41 +0100 faad2 (2.7-3) UNRELEASED; urgency=low * debian/patches/force-include-stdint_h.patch: New patch to force inclusion of stdint.h (Closes: #550679). -- Fabian Greffrath Thu, 15 Oct 2009 18:00:41 +0200 faad2 (2.7-2) unstable; urgency=low * upload to unstable. -- Reinhard Tartler Wed, 16 Sep 2009 21:07:45 +0200 faad2 (2.7-1) experimental; urgency=low [ Andres Mejia ] * New upstream release. (Closes: #515072) * Verified all patches are either applied upstream, or a different implementation is used. + (Closes: #505901) + (Closes: #503657) * Switch to quilt. * Add -DPIC for CFLAGS. * Don't include dpatch.make in debian/rules. * Update watch file to default DEHS would use. * Bump to using debhelper 7. * Use quilt (>= 0.46-7). * Update control file. * Add DM-Upload-Allowed: yes field. * Don't include dummy package anymore. * Add in description for libfaad2 that it contains shared library. * Move libfaad-dev to the front to be 'default' package debhelper acts on. * Add ${misc:Depends} for all packages. Remove libc dev packages from Depends. * Add debug packages. (Closes: #516680) * Rewrite debian/rules to use new debhelper and quilt. * Rename .files to .install. Be more specific what to include in libfaad-dev. Also include .install files for other packages. * Add libmp4ff-dev package. * Don't include version for rename of libfaad package. Place all debug symbols for binary packages in faad2-dbg. * Modify description for libmp4ff-dev. * Update address to FSF in debian/copyright. * Fix hyphen in manpage. Fixes lintian warning as well. * Patch faad2 to create a shared lib for libmp4ff. (Closes: #485373) * Allow to pass in more CFLAGS via DEB_CFLAGS. * Add in DRM (Digital Radio Mondiale) support. * Add Build-Depends of automake, autoconf, and autotools-dev. [ Fabian Greffrath ] * Add myself to Uploaders. * Clean up Build-Depends: libid3-dev was only needed for the obsolete XMMS plugin, autotools stuff shouldn't be needed at all. * Untagle library file names in the install rules. * Revert overriding of CFLAGS, dpkg-buildpackage will choose appripriate settings. Revert running the entire autoreconf sequence before calling ./configure. Build without DRM support, it has proven to break base functionality. * Clean up watch file. * Make faad2-dbg and libmp4ff-dev depend on libmp4ff0. * Improve short description for the libmp4ff\* packages. * debian/patches/70_automake-1.9.patch: New patch, run automake-1.9 to regenerate Makefile.in with the changes introduced by debian/patches/libmp4ff-shared-lib.patch. * Do not ship .la files in the development packages. * Add reasonable defaults to CFLAGS/CXXFLAGS. -- Fabian Greffrath Wed, 03 Jun 2009 11:02:00 +0200 faad2 (2.6.1-3.1) unstable; urgency=high * Non-maintainer upload by the security team * Include upstream patch to fix heap overflow in the frontend code (Closes: #499899) -- Steffen Joeris Fri, 26 Sep 2008 12:02:35 +0000 faad2 (2.6.1-3) unstable; urgency=low * Closes: #479802: Update man page to reflect on raw PCM is supported on standard out. Also, have faad fail on trying to send non-raw PCM to standard out. * Apply new knowledge about the differences between hyphens, en-dashes, and em-dashes to man pages. * Move faad man page to patch system. * Update standards version. * Add license declarations and copyright declarations to copyright file. Tidy up authors. -- Matthew W. S. Bell Thu, 19 Jun 2008 02:35:47 +0100 faad2 (2.6.1-2) unstable; urgency=low * Remove XMMS plugin as XMMS is being removed (Closes: #456724) -- Matthew W. S. Bell Fri, 21 Dec 2007 00:04:17 +0000 faad2 (2.6.1-1) unstable; urgency=low * Import new upstream version containing new license text (Closes: #451948) * Change build system to call autoreconf at build time, as upstream no longer ships generated files * Update debian/copyright to reflect new license text * Remove Build-Depends on libsndfile1-dev (Closes: #452362) -- Matthew W. S. Bell Wed, 28 Nov 2007 23:45:05 +0000 faad2 (2.6-1) unstable; urgency=low * Import new 2.6 release. Includes several small off-by-one scale fixes. * Update the copyright as new code includes a clarification of the license text, which indicates that the entire work is under the GPLv2 (closes: #419339). -- Matthew W. S. Bell Mon, 15 Oct 2007 00:16:21 +0100 faad2 (2.5-5) unstable; urgency=low * Make packages depends bin-NMU safe -- Matthew W. S. Bell Fri, 17 Aug 2007 16:07:59 +0100 faad2 (2.5-4) unstable; urgency=low * Add mp4ff headers to libfaad-dev package (Closes: 409648) -- Matthew W. S. Bell Fri, 11 May 2007 19:44:22 +0100 faad2 (2.5-3) unstable; urgency=low * Add patch to stabilise/sanitise headers (Closes: 404279) * Port several fixes from Ubuntu * Add an mp4ff static library -- Matthew W. S. Bell Sun, 15 Apr 2007 04:23:35 +0100 faad2 (2.5-2) unstable; urgency=low * add xmms-mp4 desription read not like nonsense (Closes: #399457) * Compile without Digital Radio Mondiale support, as it breaks base functionality * Update debian/copyright (See: #403117) -- Matthew W. S. Bell Mon, 4 Dec 2006 19:56:22 +0000 faad2 (2.5-1) unstable; urgency=low * Call make install with DESTDIR instead of prefix * Change configure/Makefile to provide xmms config differently * Add manual page for faad utility * Call make uninstall in clean * Add dummy libfaad2-0 pacakge to satisfy some third-party dependencies * Upload into main (Closes: #306366) -- Matthew W. S. Bell Wed, 18 Oct 2006 23:41:32 +0100 faad2 (2.5-0.0) unstable; urgency=low * New upstream release. * Add drm (Digital Radio Mondiale) support. -- Christian Marillat Wed, 6 Sep 2006 20:18:25 +0200 faad2 (2.0.0+cvs20060416-0.1) unstable; urgency=low * Rebuild for amd64. -- Christian Marillat Sat, 13 May 2006 08:58:34 +0200 faad2 (2.0.0+cvs20060416-0.0) unstable; urgency=low * CVS release. -- Christian Marillat Sun, 16 Apr 2006 17:15:00 +0200 faad2 (2.0.0-0.7) unstable; urgency=low * Rebuild for gcc 4.0 -- Christian Marillat Sat, 16 Jul 2005 17:34:28 +0200 faad2 (2.0.0-0.6) unstable; urgency=low * New patch from Gentoo to fix amd64 problem with some files. Thanks to Carl Schneidinger. -- Christian Marillat Fri, 20 May 2005 18:42:23 +0200 faad2 (2.0.0-0.5) unstable; urgency=low * Apply patch from Arnaud Rouanet to fix the -w option in faad. -- Christian Marillat Mon, 21 Mar 2005 10:13:05 +0100 faad2 (2.0.0-0.4) unstable; urgency=low * New patch 04_mp4ff.h to replace "mp4ff_int_types.h" include by -- Christian Marillat Wed, 9 Mar 2005 08:59:35 +0100 faad2 (2.0.0-0.3) unstable; urgency=low * Add libfaac-dev in Build-Depends. * Little hack to not build the mpeg4ip plugin. -- Christian Marillat Wed, 26 Jan 2005 07:36:25 +0100 faad2 (2.0.0-0.2) unstable; urgency=low * Build with libmp4 * Add new package xmms-mp4 -- Christian Marillat Mon, 25 Oct 2004 10:19:52 +0200 faad2 (2.0.0-0.1) unstable; urgency=low * Really apply my patch to link against -lm -- Christian Marillat Thu, 29 Jul 2004 15:48:22 +0200 faad2 (2.0.0-0.0) unstable; urgency=low * New upstream release. -- Christian Marillat Sun, 4 Jul 2004 00:26:23 +0200 faad2 (2.0-rc3-0.0) unstable; urgency=low * New upstream release. -- Christian Marillat Tue, 9 Dec 2003 10:57:01 +0100 faad2 (1.1-0.0) unstable; urgency=low * Initial Release. -- Christian Marillat Sun, 29 Dec 2002 23:09:33 +0100