ffmpeg (3:0.cvs20050918-5ubuntu1.2) dapper-security; urgency=low * SECURITY UPDATE: crash from crafted STR file, heap overflow in PNG. * libavcodec/utils.c: fixes from upstream, thanks to Debian (CVE-2005-4048). * libavformat/psxstr.c: backported fixes from upstream (CVE-2008-3162). -- Kees Cook Wed, 23 Jul 2008 13:28:45 -0700 ffmpeg (3:0.cvs20050918-5ubuntu1.1) dapper-security; urgency=low * SECURITY UPDATE: Fix arbitrary code execution in multiple buffer overflows. * libavcodec/{4mc,alac,shorten,snow,dtsdec,vorbis}.c, libavformat/rm.c: Backported CVS changes to check for buffer overflow conditions. * References - CVE-2006-4800 - http://bugs.gentoo.org/show_bug.cgi?id=133520 -- Kees Cook Fri, 29 Sep 2006 13:49:02 -0700 ffmpeg (3:0.cvs20050918-5ubuntu1) dapper; urgency=low * Sync with Debian: + Compile with -fomit-frame-pointer for x86 to gain a new register in some situations... Fixes FTBFS on x86... ugly architecture + Add -DRUNTIME_CPUDETECT to CFLAGS to enable runtime CPU feature detection. This let ffmpeg work on G3 powerpc for example + Re-add epoch -- Sebastian Dröge Thu, 24 Nov 2005 10:40:37 +0100 ffmpeg (0.cvs20050918-5) unstable; urgency=low * ffmpeg-config.1: fixed the examples and added a note that static libraries should be put after the objects that refer to them (Closes: #339803). -- Sam Hocevar (Debian packages) Fri, 18 Nov 2005 23:58:16 +0100 ffmpeg (0.cvs20050918-4) unstable; urgency=low * configure: + Tell the configure script about m68k, ia64 and others. -- Sam Hocevar (Debian packages) Thu, 22 Sep 2005 14:43:59 +0200 ffmpeg (0.cvs20050918-3) unstable; urgency=low * configure: + Use -O2 instead of -O3 on m68k to avoid ICEs. -- Sam Hocevar (Debian packages) Tue, 20 Sep 2005 17:33:14 +0200 ffmpeg (0.cvs20050918-2) unstable; urgency=low * libavcodec/i386/dsputil_mmx.c: + Reworked the MMX intrinsics. * tests/libav.regression.ref: + Minor cosmetic fix to use double-digit numbers in test sequences. * debian/control: + PowerPC no longer needs to use gcc-3.4, since 4.x is the default. * libavcodec/Makefile: + Removed special compilation case for HPPA now that we use 4.x. -- Sam Hocevar (Debian packages) Sun, 18 Sep 2005 17:43:48 +0200 ffmpeg (0.cvs20050918-1) unstable; urgency=low * New CVS snapshot. * Upstream applied most Debian patches. * configure: + Do not use -mabi=altivec (-maltivec is enough for our AltiVec code) so that our code still runs on a G3 computer (Closes: #319151). * debian/rules: + When not cross-compiling, run the regression tests (Closes: #292102). * debian/changelog: + Updated the FSF address. * ffmpeg-config.in: + Fixed avcodec linkage (Closes: #328505). * libavcodec/i386/mpegvideo_mmx_template.c: + Applied patch from Tobias Grimm to fix the PIC MMX code for MPEG encoding (Closes: #318493). * libavcodec/i386/dsputil_mmx.c: + Applied patch from Joshua Kwan to fix the AMD64 build (Closes: #324026). + Reworked that patch so that it still compiles on x86. -- Sam Hocevar (Debian packages) Fri, 16 Sep 2005 13:03:47 +0200 ffmpeg (0.cvs20050811-2) unstable; urgency=low * ffmpeg-config.in: added a missing -lgsm. -- Sam Hocevar (Debian packages) Mon, 22 Aug 2005 19:51:53 +0200 ffmpeg (0.cvs20050811-1) unstable; urgency=low * New CVS snapshot. * Upstream fixed an integer overflow in the MPEG encoder (Closes: #320150). * debian/rules: + Activated libgsm support. + Fixed theora support. + Switched installation method to dh_install. * Applied patch from Christian Aichinger and others to fix the clobbering of the %ebx register during build (Closes: #319563). -- Sam Hocevar (Debian packages) Thu, 11 Aug 2005 14:22:03 +0200 ffmpeg (0.cvs20050626-2) unstable; urgency=low * ffmpeg-config.in: fixed the theora link that caused FTBFS. -- Sam Hocevar (Debian packages) Fri, 1 Jul 2005 17:20:59 +0200 ffmpeg (0.cvs20050626-1) unstable; urgency=low * New CVS snapshot. * debian/control: + Set policy to 3.6.2.1. * debian/rules: + Fixed Vorbis support (Closes: #306023). + Patch by Jonas Smedegaard : conditionally enable these unofficial libraries if DEB_BUILD_OPTIONS includes "risky": o Mpeg2 layer 3 / MP3 (liblame-dev). o FAAD (libfaad2-dev). o FAAC (libfaac-dev). o XviD (libxvidcore-dev). + Activated theora support. + Activated IEEE 1394 support (Closes: #296737). -- Sam Hocevar (Debian packages) Sun, 26 Jun 2005 15:46:54 +0200 ffmpeg (0.cvs20050313-2) unstable; urgency=low * libavcodec/libpostproc/postprocess_template.c libavcodec/i386/mpegvideo_mmx_template.c: fixed my PIC MMX code (Closes: #299700). * debian/rules: use gcc-3.4 on PowerPC (Closes: #300686). -- Sam Hocevar (Debian packages) Mon, 21 Mar 2005 23:38:46 +0100 ffmpeg (0.cvs20050313-1) unstable; urgency=low * New CVS snapshot. * configure: fixed the builtin vector test (Closes: #293284), thanks to Jacob L. Anawalt. * libavcodec/libpostproc/postprocess_template.c libavcodec/i386/mpegvideo_mmx_template.c: fixed MMX code so that it can be compiled in PIC mode, and reactivated MMX (Closes: #290447, #290358). -- Sam Hocevar (Debian packages) Sat, 12 Mar 2005 18:34:29 +0100 ffmpeg (0.cvs20050121-1) unstable; urgency=low * New CVS snapshot. * This snapshot fixes integer overflows that may lead to arbitrary code execution (Closes: #291566). -- Sam Hocevar (Debian packages) Fri, 21 Jan 2005 17:41:47 +0100 ffmpeg (0.cvs20050108-1) unstable; urgency=low * Re-done tarball snapshot so that it does not contain binaries. * ffmpeg-config.in: + Added missing -lvorbisenc (Closes: #289030). * debian/rules: + Install missing headers that are not in the install rule: bwswap.h, dsputil.h, os_support.h (Closes: #289033). -- Sam Hocevar (Debian packages) Sat, 8 Jan 2005 11:30:58 +0100 ffmpeg (0.cvs20050106-1) unstable; urgency=low * New upstream snapshot. * The extern/static declaration conflict was fixed upstream (Closes: #288906). -- Sam Hocevar (Debian packages) Thu, 6 Jan 2005 15:44:49 +0100 ffmpeg (0.cvs20040716-2) unstable; urgency=low * debian/rules: + Include missing rtp.h / rtsp.h in libavformat-dev. * ffmpeg-config.in: + Added -lz to the libavcodec linking flags. + Added -ldts / -ldts_pic, -la52, -lvorbis to the libavcodec linking flags. -- Sam Hocevar (Debian packages) Tue, 17 Aug 2004 13:27:41 +0200 ffmpeg (0.cvs20040716-1) unstable; urgency=low * Initial release (Closes: #199266). -- Sam Hocevar (Debian packages) Fri, 16 Jul 2004 12:47:27 +0200