2009
ffmpeg (0.cvs20060823-8+etch1) oldstable-security; urgency=high
* Non-maintainer upload by the security team * Fix integer signedness error in libavformat/4xm.c (Closes: #524799) Fixes: CVE-2009-0385 * Fix buffer overflow in libavformat/psxstr.c (Closes: #489965) Fixes: CVE-2008-3162
-- Steffen Joeris <white@debian.org> Sun, 26 Apr 2009 11:19:49 +0000
2007
ffmpeg (0.cvs20060823-8) unstable; urgency=high
* debian/patches/052_base64_encode_crash.diff:
+ New patch: fix an infinite loop in base64 encoding.
* debian/patches/053_rm_demux_crash.diff:
+ New patch: fix a double free with corrupted rm files (Closes: #379922).
* debian/patches/054_h264_mmx_chroma_mc_crash.diff:
+ New patch: workaround for a buffer overflow in the MMX H264 chroma
motion compensation until upstream fixes it properly (Closes: #404176).
* debian/patches/070_zzuf_r7536_ogm_crash.diff:
* debian/patches/071_zzuf_r7537_avi_crash.diff:
* debian/patches/072_zzuf_r7538_mpeg_crash.diff:
* debian/patches/073_zzuf_r7539_asf_crash.diff:
* debian/patches/074_zzuf_r7561_ogm_crash.diff:
* debian/patches/075_zzuf_r7595_flac_crash.diff:
* debian/patches/076_zzuf_r7718_mpeg_infinite_loop.diff:
* debian/patches/077_zzuf_r7889_mpeg_crash.diff:
+ New patches taken from upstream SVN. Fix various crashes and deadlocks
found with zzuf (Closes: #407003).
* debian/control:
+ Set pkg-multimedia-maintainers as main maintainer.
+ Updated VCS fields.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 23 Mar 2007 22:43:48 +0100
ffmpeg (0.cvs20060823-7) unstable; urgency=high
* debian/patches/040_only_use_maltivec_when_needed.diff:
+ Fix a static function prototype that prevented programs using libpostproc
from working on PowerPC (Closes: #412214).
* debian/control:
+ Added Xs-Vcs-Browser and XS-Vcs-Svn fields.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 8 Mar 2007 17:51:37 +0100
ffmpeg (0.cvs20060823-6) unstable; urgency=high
* Upload to unstable.
-- Loic Minier <lool@dooz.org> Thu, 1 Feb 2007 21:36:47 +0100
ffmpeg (0.cvs20060823-5) testing-proposed-updates; urgency=high
[ Loïc Minier ]
* Add myself to Uploaders.
* Exclude firewire libs from ffmpeg-config under kFreeBSD; based on a patch
by Petr Salinger; closes: #399701.
* Fix handling of debug in DEB_BUILD_OPTIONS; thanks Andreas Henriksson;
closes: #406474.
* SECURITY: New patch, 050_h264-misc-security-fixes, to properly check the
sps and pps ids before use and to check more bitstram values and fix
potential security holes; from upstream SVN r7585, r7586, and r7591.
* SECURITY: New patch, 051_asf-misc-security-fixes, to properly check
packet sizes, chunk sizes, and fragment positions; from upstream SVN r7640
and r7650.
[ Sam Hocevar ]
* debian/copyright:
+ Fix typo and clarify licensing terms (Closes: #398235).
* debian/README.Debian:
+ Removed mention of ffmpeg-config now that we ship .pc files.
* debian/patches/020_mmx_optims.diff:
+ New patch, fix FTBFS with DEB_BUILD_OPTIONS=debug.
* debian/patches/040_early_altivec_detection.diff:
+ New patch, detect AltiVec earlier on and only once so that we don't
risk using signal handlers in a multithreaded environment or when
the caller already installed a SIGILL handler.
* debian/patches/040_only_use_maltivec_when_needed.diff:
+ New patch, only use -maltivec with files that use AltiVec intrinsics,
and make sure no codepath leads to these files on a non-AltiVec
machine (Closes: #405926).
* debian/patches/060_fix_avi_skip.diff:
+ New patch, courtesy of Ben Hutchings: do not attempt to skip the ODML
if the current seek offset is already beyond it (Closes: #383734).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Mon, 29 Jan 2007 16:58:44 +0100
2006
ffmpeg (0.cvs20060823-4) unstable; urgency=high
* Maintainer upload. * Acknowledging NMU (Closes: #386458). * High urgency because of FTBFS fix. * debian/patches/030_arm_workaround.diff: + New patch courtesy of Aurélien Jarno: disable the broken ARM assembly code in libavcodec/mpegaudiodec.c. * debian/patches/030_arm_cpu_detect.diff: + New patch courtesy of Aurélien Jarno: correctly detect the newer ARM CPUs.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sun, 24 Sep 2006 23:38:29 +0200
ffmpeg (0.cvs20060823-3.1) unstable; urgency=medium
* Non-maintainer upload. * Fix variable substitution trick in debian/rules (Closes: #386458).
-- Luk Claes <luk@debian.org> Fri, 15 Sep 2006 21:29:07 +0200
ffmpeg (0.cvs20060823-3) unstable; urgency=low
* debian/rules:
+ Take local packages into account when computing shlibs dependencies, so
that ffplay/ffserver depend on the proper libraries (Closes: #386029).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Tue, 5 Sep 2006 17:44:00 +0200
ffmpeg (0.cvs20060823-2) unstable; urgency=low
* debian/patches/020_really_use_liba52.diff:
+ New patch: link with the shared liba52 instead of the built-in one.
* debian/patches/006_mips_pthreads.diff:
+ New patch: link libraries with -lpthreads on Linux MIPS because of a
known ld bug.
* debian/patches/007_disable_ffmpeg_option.diff:
+ New patch: add a --disable-ffmpeg option.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Wed, 30 Aug 2006 18:36:52 +0200
ffmpeg (0.cvs20060823-1) unstable; urgency=low
* New SVN snapshot (Closes: #368904). * debian/control: + Set policy to 3.7.2. + Do not build 1394 support on GNU/kFreeBSD or Hurd. Patch courtesy of Petr Salinger (Closes: #372290). * debian/rules: + Minor cleanup. + Removed --enable-theora, upstream dropped that option. * debian/patches/020_mmx_intrinsics.diff: + Disabled intrinsics workaround because it is no longer necessary and it causes trouble with some codecs such as H264 (Closes: #373765).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Wed, 23 Aug 2006 12:09:58 +0200
ffmpeg (0.cvs20060329-4) unstable; urgency=low
* debian/control:
+ Make each -dev package depend on the corresponding shared library
package (Closes: #361348).
+ Moved libavutil files from libavformat-dev to libavcodec-dev which is
the real common dependency (Closes: #361269).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sun, 9 Apr 2006 15:23:37 +0200
ffmpeg (0.cvs20060329-3) unstable; urgency=low
* debian/rules: that build system is hopeless. We now run configure and
make twice, backup static libraries inbetween, then update timestamps
to fool make. That should fix the FTBFS (Closes: #361215).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 7 Apr 2006 11:33:15 +0200
ffmpeg (0.cvs20060329-2) unstable; urgency=low
* debian/rules: fixed Makefile.pic generation.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 6 Apr 2006 16:37:05 +0200
ffmpeg (0.cvs20060329-1) unstable; urgency=low
* New CVS snapshot. * Upstream fixed a double free in img.c (Closes: #351455). * Upstream fixed the libvorbisenc dependency in libavcodec.pc (Closes: #357352). * debian/rules: + Activated threading support (Closes: #335677). + Manually reinstall dsputil.h. * debian/README.Debian: + Removed mention of --plugin-libs. + Added a note about the unofficial packages (Closes: #306752). * 020_disable_snow_mmx_in_pic.diff: (new patch) disable MMX acceleration in the Snow encoder in PIC mode.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 30 Mar 2006 10:41:17 +0200
ffmpeg (0.cvs20060306-3) unstable; urgency=low
* Switched patch system to quilt.
* debian/control:
+ Build-depend on quilt.
* 005_altivec_flags.diff: (new patch from old diff.gz) proper gcc flags to
only generate AltiVec code when explicitely asked.
* 005_m68k_workaround.diff: (new patch from old diff.gz) use -O2 instead of
-O3 on m68k.
* 005_runtime_cpudetect.diff: (new patch from old diff.gz) fix runtime CPU
detection on m68k and x86.
* 010_ffmpeg-config.diff: (new patch from old diff.gz) the ffmpeg-config
script and associated manpage (legacy).
* 010_shared_library_versioning.diff: (new patch from old diff.gz) use a
Debian-specific scheme for shared library versioning to avoid spreading
libraries incompatible with every other version.
* 020_mmx_intrinsics.diff: (new patch from old diff.gz) use MMX intrinsics
in dsputil_mmx.c because gcc is unable to compute some register constraints
in PIC mode.
* 020_mmx_pic_code.diff: (new patch from old diff.gz) ported some MMX code
to be PIC.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Wed, 29 Mar 2006 18:53:35 +0200
ffmpeg (0.cvs20060306-2) unstable; urgency=low
* ffmpeg-config.in: removed references to _pic libraries.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 17 Mar 2006 20:08:29 +0100
ffmpeg (0.cvs20060306-1) unstable; urgency=low
* New CVS snapshot. * Upstream now properly installs dsputil.h (Closes: #354391). * debian/control: + Distribute shared versions of the libraries with a Debian-specific soname. * debian/rules: + Removed all custom PIC rules. + Moved ffmpeg-config to libavformat-dev instead of libavcodec-dev so that it is present by default (Closes: #350750). + Include apiexample.c in libavcodec-dev (Closes: #350027).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Mon, 6 Mar 2006 11:05:26 +0100
ffmpeg (0.cvs20050918-6) unstable; urgency=low
* Developer upload. * Acknowledge NMU. Thanks to Samuel Mimram (Closes: #342207). * configure: + Set RUNTIME_CPUDETECT (except on m68k where it ICEs and on x86 where it fails to build some asm constructs) (Closes: #337846). * debian/rules: + Make the build process aware of DEB_BUILD_OPTIONS, thanks to Timo Lindfors (Closes: #338895).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sat, 21 Jan 2006 16:51:26 +0100
ffmpeg (0.cvs20050918-5.1) unstable; urgency=low
* NMU.
* Fix exploitable heap overflow in libavcodec's handling of images with
PIX_FMT_PAL8 pixel formats (CVE-2005-4048), closes: #342207.
-- Samuel Mimram <smimram@debian.org> Sun, 15 Jan 2006 14:44:36 +0100
2005
ffmpeg (0.cvs20050918-5) unstable; urgency=low
* ffmpeg-config.1: fixed the examples and added a note that static libraries
should be put after the objects that refer to them (Closes: #339803).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 18 Nov 2005 23:58:16 +0100
ffmpeg (0.cvs20050918-4) unstable; urgency=low
* configure:
+ Tell the configure script about m68k, ia64 and others.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 22 Sep 2005 14:43:59 +0200
ffmpeg (0.cvs20050918-3) unstable; urgency=low
* configure:
+ Use -O2 instead of -O3 on m68k to avoid ICEs.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Tue, 20 Sep 2005 17:33:14 +0200
ffmpeg (0.cvs20050918-2) unstable; urgency=low
* libavcodec/i386/dsputil_mmx.c:
+ Reworked the MMX intrinsics.
* tests/libav.regression.ref:
+ Minor cosmetic fix to use double-digit numbers in test sequences.
* debian/control:
+ PowerPC no longer needs to use gcc-3.4, since 4.x is the default.
* libavcodec/Makefile:
+ Removed special compilation case for HPPA now that we use 4.x.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sun, 18 Sep 2005 17:43:48 +0200
ffmpeg (0.cvs20050918-1) unstable; urgency=low
* New CVS snapshot.
* Upstream applied most Debian patches.
* configure:
+ Do not use -mabi=altivec (-maltivec is enough for our AltiVec code) so
that our code still runs on a G3 computer (Closes: #319151).
* debian/rules:
+ When not cross-compiling, run the regression tests (Closes: #292102).
* debian/changelog:
+ Updated the FSF address.
* ffmpeg-config.in:
+ Fixed avcodec linkage (Closes: #328505).
* libavcodec/i386/mpegvideo_mmx_template.c:
+ Applied patch from Tobias Grimm to fix the PIC MMX code for MPEG
encoding (Closes: #318493).
* libavcodec/i386/dsputil_mmx.c:
+ Applied patch from Joshua Kwan to fix the AMD64 build (Closes: #324026).
+ Reworked that patch so that it still compiles on x86.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 16 Sep 2005 13:03:47 +0200
ffmpeg (0.cvs20050811-2) unstable; urgency=low
* ffmpeg-config.in: added a missing -lgsm.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Mon, 22 Aug 2005 19:51:53 +0200
ffmpeg (0.cvs20050811-1) unstable; urgency=low
* New CVS snapshot. * Upstream fixed an integer overflow in the MPEG encoder (Closes: #320150). * debian/rules: + Activated libgsm support. + Fixed theora support. + Switched installation method to dh_install. * Applied patch from Christian Aichinger and others to fix the clobbering of the %ebx register during build (Closes: #319563).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 11 Aug 2005 14:22:03 +0200
ffmpeg (0.cvs20050626-2) unstable; urgency=low
* ffmpeg-config.in: fixed the theora link that caused FTBFS.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 1 Jul 2005 17:20:59 +0200
ffmpeg (0.cvs20050626-1) unstable; urgency=low
* New CVS snapshot.
* debian/control:
+ Set policy to 3.6.2.1.
* debian/rules:
+ Fixed Vorbis support (Closes: #306023).
+ Patch by Jonas Smedegaard <dr@jones.dk>: conditionally enable these
unofficial libraries if DEB_BUILD_OPTIONS includes "risky":
o Mpeg2 layer 3 / MP3 (liblame-dev).
o FAAD (libfaad2-dev).
o FAAC (libfaac-dev).
o XviD (libxvidcore-dev).
+ Activated theora support.
+ Activated IEEE 1394 support (Closes: #296737).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sun, 26 Jun 2005 15:46:54 +0200
ffmpeg (0.cvs20050313-2) unstable; urgency=low
* libavcodec/libpostproc/postprocess_template.c
libavcodec/i386/mpegvideo_mmx_template.c: fixed my PIC MMX code (Closes: #299700).
* debian/rules: use gcc-3.4 on PowerPC (Closes: #300686).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Mon, 21 Mar 2005 23:38:46 +0100
ffmpeg (0.cvs20050313-1) unstable; urgency=low
* New CVS snapshot. * configure: fixed the builtin vector test (Closes: #293284), thanks to Jacob L. Anawalt. * libavcodec/libpostproc/postprocess_template.c libavcodec/i386/mpegvideo_mmx_template.c: fixed MMX code so that it can be compiled in PIC mode, and reactivated MMX (Closes: #290447, #290358).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sat, 12 Mar 2005 18:34:29 +0100
ffmpeg (0.cvs20050121-1) unstable; urgency=low
* New CVS snapshot.
* This snapshot fixes integer overflows that may lead to arbitrary code
execution (Closes: #291566).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 21 Jan 2005 17:41:47 +0100
ffmpeg (0.cvs20050108-1) unstable; urgency=low
* Re-done tarball snapshot so that it does not contain binaries.
* ffmpeg-config.in:
+ Added missing -lvorbisenc (Closes: #289030).
* debian/rules:
+ Install missing headers that are not in the install rule: bwswap.h,
dsputil.h, os_support.h (Closes: #289033).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Sat, 8 Jan 2005 11:30:58 +0100
ffmpeg (0.cvs20050106-1) unstable; urgency=low
* New upstream snapshot. * The extern/static declaration conflict was fixed upstream (Closes: #288906).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Thu, 6 Jan 2005 15:44:49 +0100
2004
ffmpeg (0.cvs20040716-2) unstable; urgency=low
* debian/rules:
+ Include missing rtp.h / rtsp.h in libavformat-dev.
* ffmpeg-config.in:
+ Added -lz to the libavcodec linking flags.
+ Added -ldts / -ldts_pic, -la52, -lvorbis to the libavcodec linking flags.
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Tue, 17 Aug 2004 13:27:41 +0200
ffmpeg (0.cvs20040716-1) unstable; urgency=low
* Initial release (Closes: #199266).
-- Sam Hocevar (Debian packages) <sam+deb@zoy.org> Fri, 16 Jul 2004 12:47:27 +0200