lp:ubuntu/trusty-security/flac

Created by Ubuntu Package Importer and last modified
Get this branch:
bzr branch lp:ubuntu/trusty-security/flac
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

17. By Marc Deslauriers

* SECURITY UPDATE: arbitrary code execution via crafted .flac file
  - debian/patches/CVE-2014-8962.patch: validate id in
    src/libFLAC/stream_decoder.c.
  - CVE-2014-8962
* SECURITY UPDATE: arbitrary code execution via crafted .flac file
  - debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
    in src/libFLAC/stream_decoder.c.
  - CVE-2014-9028

16. By Fabian Greffrath <email address hidden>

[ Reinhard Tartler ]
* switch to xz compression
* Bump standards version (no changes)

[ Fabian Greffrath ]
* Add -lflac to flac++'s pkg-config file (Closes: #713645);
  thanks Sebastian Ramacher.

15. By Fabian Greffrath <email address hidden>

* Imported Upstream version 1.3.0 (Closes: #527542, #705601).
* Update debian/watch file, thanks Ulrich Klauer (Closes: #710062).
* Revert "Remove manpages from master branch."
* Imported Upstream version 1.3.0
* Convert package to "3.0 (quilt)" source format.
* Remove all patches, they have either been merged upstream or do not
  apply anymore (tested).
* Explicitly enable static libraries.
* Simplify debian/libflac-doc.install.
* Bump shlibs for added symbols.
* Remove needless Build-Depends: libid3-3.8.3-dev.
* Update Homepage field.
* Repair upstream manpage regeneration rule.
* Bump Build-Depends: debhelper (>= 9).
* Fix vcs-field-not-canonical.
* Import two patches from upstream GIT:
  + Add missing config.h includes.
  + Fix local_strcat() to terminate string correctly.
* Disable 3DNow! optimizations, enable SSE only on amd64, enable Altivec
  only on ppc64, disable ASM optimizations elsewhere.

14. By Fabian Greffrath <email address hidden>

Fix "format not a string literal and no format arguments
[-Werror=format-security]" errors (Closes: #643377).

13. By Alessio Treglia

* Team upload.

[ Steve Langasek ]
* Transition package to multiarch (Closes: #637582)

12. By Fabian Greffrath <email address hidden>

[ Fabian Greffrath ]
* Convert patch tracking system from dpatch to quilt.
* Convert package to use dh7 with quilt and autotools-dev sequence
  addons.
* Clean up debian/control and debian/flac.install.
* Remove unnecessary debian/fixrpath.
* Skip test suite, it was also skipped before.
* Bring back config.sub and config.guess from upstream branch.
* Improve debian/copyright.
* Remove special handling of CFLAGS for m68k.
* debian/patches/12_ac_config_macro_dir.patch: New patch, fixes
  "undefined macro: AM_PATH_XMMS" and similar errors which cause
  autoreconf to fail.
* Drop debian/patches/90_autoreconf.patch in favour of dh-autoreconf.
* Convert patch tracking system from dpatch to quilt.
* Convert package to use dh7 with quilt and autotools-dev sequence addons.
* Clean up debian/control and debian/flac.install.
* Remove unseless debian/fixrpath.
* Prepare new changelog entry.
* Skip test suite, it was also skipped before.
* Bring back config.sub and config.guess from upstream branch.
* Clarify dh_auto_test should be omitted.
* Update debian/changelog.
* Improve debian/copyright.
* Update debian/changelog.
* Remove special handling of CFLAGS for m68k.
* debian/patches/12_ac_config_macro_dir.patch: New patch, fixes
  "undefined macro: AM_PATH_XMMS" and similar errors which cause
  autoreconf to fail.
* Drop debian/patches/90_autoreconf.patch in favour of dh-autoreconf.
* Update debian/changelog.
* Remove 90_autoreconf.patch from debian/patches/series as well.

[ Alessio Treglia ]
* debian/control:
  - Bump Standards.
  - Fix team's name.
* debian/patches/13_replaygain_c_locale.patch:
  - flac should not use locales when running with 'replaygain'
    option (Closes: #498050).
* debian/patches/14_metadata_iterators_memleak.patch:
  - Fix memoy leak in metadata_iterators.c, 'node' is not freed;
    Patch taken from upstream's patchtracker.
* Add .gitignore to skip quilt files.
* Add gbp config file.
* Get rid of unneeded *.la files (Closes: #633177).

11. By Fabian Greffrath <email address hidden>

* Add Joshua Kwan back to Uploaders, sorry!
* Update my e-mail address.
* Fix "libFLAC.m4 may set empty -L flag when configure is called
  without arguments" (Closes: #579025).
* Consider *gnuspe which matches powerpc-unknown-linux-gnuspe where
  AltiVec is not available at all (Closes: #585518), thanks Sebastian
  Andrzej Siewior.
* Mandatory autoreconf.
* Add debian/source/format, keep at 1.0 for now.
* Add debian/README.source.
* Add Vcs-* and Homepage fields.
* Bump Standards-Version to 3.8.4.

10. By Fabian Greffrath <email address hidden>

* New maintainer (Closes: #539565).
* Acknowledge NMUs (Closes: #456726, #455304, #525826, #525829).
* Urgency high, because of fixed RC bugs.

* Set Maintainer to Debian multimedia packages maintainers and added
  myself to Uploaders.
* Wrapped and sorted Build-Depends.
* Added ${misc:Depends} to all packages and wrapped Depends fields.
* Bumped debhelper compat to 7.
* Removed versioned dependency on g++ and libid3-3.8.3-dev, the
  required versions are already in oldstable.
* Bumped Standards-Version to 3.8.2.
* Removed Conflicts and Replaces against packages that aren't even in
  oldstable anymore.
* Point to versioned license file (GPL-2).
* Use dh_prep instead of dh_clean -k.
* Update config.sub and config.guess in the configure rule and remove
  them in the clean target.
* Fixed doc-base-uses-applications-section.
* debian/patches/09_noexec-stack.dpatch: New patch to indicate that
  libFLAC.so doesn't need an executable stack (Closes: #467544),
  Thanks Russell Coker <email address hidden>.
* Added shlibs information for libflac8 and libflac++6 (Closes:
  #481428, #508293).
* Fixed binary-control-field-duplicates-source.
* Added patch description to debian/patches/02_doc_path.dpatch.
* Added patch description to debian/patches/08_gcc-4.3_fixes.dpatch.
* Regenerate manpages at compile time: Add docbook-to-man to Build-
  Depends, change debian/patches/02_doc_path.dpatch to modify
  man/flac.sgml, stop touching man/flac.1 in debian/rules and remove
  the manpages in the clean target.

9. By Marc 'HE' Brockschmidt <email address hidden>

* Non-maintainer upload.
* Fix gcc-4.3 FTBFS, patch by KiBi (Closes: #455304)

8. By Joshua Kwan

Update 04_stack_smasher.dpatch, a more complete fix backported from
1.1.3. This should fix the XMMS crash issue, thanks Jan Luebbe.
closes: #401774

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/vivid/flac
This branch contains Public information 
Everyone can see this information.

Subscribers