lp:ubuntu/feisty-security/mplayer

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

30. By William Grant on 2008-03-08

* SECURITY UPDATE: buffer overruns in RMMF, CDDB, MOV demuxer, FLAC header
  parser, and URL parser. (LP: #191488)
* stream/librtsp/rtsp_session.c, stream/realrtsp/rmff.c,
  stream/realrtsp/rmff.h, libmpdemux/demux_audio.c, libmpdemux/demux_mov.c,
  stream/stream_cddb.c, stream/url.c: Patches from upstream.
* References:
  - CVE-2008-0225
  - CVE-2008-0238
  - CVE-2008-0485
  - CVE-2008-0486
  - CVE-2008-0629
  - CVE-2008-0630

29. By William Grant on 2007-11-06

* SECURITY UPDATE: buffer overrun in mpdemux code (LP: #140891).
* libmpdemux/aviheader.c: Apply upstream patch.
* References:
  - CVE-2007-4938

28. By William Grant on 2007-06-11

* SECURITY UPDATE: buffer overrun in cddb code (LP: #118855).
* stream/stream_cddb.c: Apply upstream patch.
* References:
  - CVE-2007-2948

27. By Sarah Kowalik on 2007-04-09

* Rebuild to get correct version of libdirectfb
* Modified Maintainer value to match Debian-Maintainer-Field Spec

26. By Nafallo Bjälevik on 2007-03-12

* Fix some formatting in our patches.
* etc/examples.conf:
  - Add ac=mad, to use libmad as first choice.
* debian/rules:
  - Reenable mp3lib again... *sigh*

25. By Nafallo Bjälevik on 2007-03-11

[ Christian Bjälevik ]
* debian/rules:
  - Add --disable-mp3lib to actually disable the damn thing.
* DOCS/man/en/mplayer.1:
  - Remove documentation about -vo aa:help (LP: #43301).
* Various files (see bzr diff for info):
  - Apply patch taken from Mandriva CVS (LP: #53947)
    to use dbus for disabling gnome-screensaver.

[ William Grant ]
* Enable LADSPA (LP: #67400)
  - Add ladspa-sdk to Build-Depends.

24. By Nafallo Bjälevik on 2007-03-10

* debian/rules:
  - Disable mp3lib and enable mad (LP: #85751).
* debian/control:
  - Add libmad0-dev to Build-Deps.

23. By Kees Cook on 2007-03-09

* SECURITY UPDATE: DirectShow decoder heap overflow.
* loader/dshow/DS_VideoDecoder.c: added upstream fix.
* References
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072

22. By Kees Cook on 2007-03-06

* SECURITY UPDATE: DMO decoder heap overflow.
* loader/dmo/DMO_VideoDecoder.c: added upstream fix.
* References
  http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204
  CVE-2007-1246

21. By Nafallo Bjälevik on 2007-02-06

* debian/rules:
  - Add --enable-mp3lib to CONFIGURE_AUDIO_CODECS (LP: #83580).
  - Remove --disable-mp3lib. This one took some time to find.