Branches for Hoary

Author: Chris Halls
Revision Date: 2005-04-06 09:45:07 UTC

* Remove internal libmad support and patch to use external libmad library.
  Please install libmad0 to restore support for restricted formats.
* debain/shlibdeps.sh:
  - Generate Suggests for xineplug_decode_mad.so
  - Fix problem that caused nothing to be generated if a Recommends or
    Suggests library is missing

Author: Kees Cook
Revision Date: 2006-09-29 17:55:36 UTC

* SECURITY UPDATE: Arbitrary code execution with crafted streams.
* src/demuxers/demux_avi.c: Fix buffer overflow in AVI index size.
* src/libffmpeg/libavcodec/4xm.c: Fix integer overflow.
* References
  - CVE-2006-4799
  - http://xine.cvs.sourceforge.net/xine/xine-lib/src/demuxers/demux_avi.c?r1=1.224&r2=1.225
  - CVE-2006-4800
  - http://bugs.gentoo.org/show_bug.cgi?id=133520

Author: Martin Pitt
Revision Date: 2005-12-15 12:33:12 UTC

* SECURITY UPDATE: Fix arbitrary code execution with crafted PNG images in
  embedded ffmpeg copy.
* src/libffmpeg/libavcodec/utils.c, avcodec_default_get_buffer(): Apply
  upstream patch to fix buffer overflow on decoding of small PIX_FMT_PAL8
  PNG files.
* References:
  CVE-2005-4048
  http://mplayerhq.hu/pipermail/ffmpeg-devel/2005-November/005333.html
  http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/
  utils.c.diff?r1=1.161&r2=1.162&cvsroot=FFMpeg