[SCM] libav/master: Merge branch 'master' into experimental

Sun Apr 26 17:51:48 UTC 2015

Finalize changelog
New upstream release
Merge tag 'upstream/11.3'
Imported Upstream version 11.3
doc: More changelog updates for v11.3
utvideodec: Handle slice_height being zero
adxdec: set avctx->channels in adx_read_header
rmenc: limit packet size
webp: validate the distance prefix code
rv10: check size of s->mb_width * s->mb_height
eamad: check for out of bounds read
mdec: check for out of bounds read
configure: Properly fail when libcdio/cdparanoia is not found
tiff: Check that there is no aliasing in pixel format selection
aic: Fix decoding files with odd dimensions
vorbis: Check the vlc value in setup_classifs
arm: Suppress tags about used cpu arch and extensions
doc: Update changelog for v11.3
Prepare for 11.3 Release
prores: Extend the padding check to 16bit
icecast: Do not use chunked post
img2dec: correctly use the parsed value from -start_number
h264_cabac: Break infinite loops
hevc_deblock: Fix compilation with nasm
h264: initialize H264Context.avctx in init_thread_copy
h264: Do not share rbsp_buffer across threads
h264: only ref cur_pic in update_thread_context if it is initialized
matroskadec: Fix read-after-free in matroska_read_seek()
log: Unbreak no-tty support on 256color terminals
Finalize changelog
Merge tag 'upstream/11.2'
Imported Upstream version 11.2
Prepare for 11.2 Release
doc: Update the Changelog for release 11.2
vp7: fix checking vp7_feature_value_size()
libopusenc: prevent an out-of-bounds read by returning early
display: fix order of operands
ffv1: fix out-of-bounds read
indeo3: check ff_set_dimensions return value
g2meet: check ff_set_dimensions return value
avs: check ff_set_dimensions return value
ansi: check ff_set_dimensions return value
svq1enc: check ff_get_buffer return value
on2avc: Fix out of array access
librtmp: append the correct field to the string
lavc: fix bitshifts amount bigger than the type
configure: Fix enabling memalign_hack automatically
lavc: Move the libtwolame encoder registration to the list for external libraries
xwma: Do not leak on failure path
libtwolame: prevent a NULL pointer dereference
dvdsubdec: Do not leak on failure path
qdm2: avoid integer overflow
mpegenc: prevent a NULL pointer dereference
aacdec: avoid an out-of-bounds write
cook: Make sure there is enough extradata
tiffenc: initialize return value
roqaudio: Always use the frame buffer on flush
hnm4: Use av_image_check_size
png_parser: fix size of chunk_lenght
aacsbr: change order of operation to prevent out of array read
assdec: check av_new_packet return value
mtv: improve header check and avoid division by zero
matroskaenc: write correct Display{Width, Height} in stereo encoding
mov: fix assigment check
mxfdec: add missing break
lavf: replace rename() with ff_rename()
img2dec: check av_new_packet return value
audiointerleave: check av_new_packet return value
avfilter: check filter link validity
mp3dec: fix reading the Xing tag
nutdec: check av_new_packet return value
rmdec: check av_new_packet return value
vf_format: check input validity
aviobuf: check context before using it
avio: fix sizeof argument
swscale: fix sign extensions in yuv planar conversion
oss_audio: use a macro to simplify ioctl() error checking
avresample: Make sure the even check does not overflow
af_resample: check av_opt_set_dict return value
vf_showinfo: Forward the av_image_get_linesize error
vf_drawtext: Do not leak the mmapped textfile
cmdutils: Use the correct guard
avformat: Make avformat_free_context handle NULL
rtsp: Check a memory allocation
rm: Use the correct codec_data_size signedness
latm: Do not give a score for a single instance
mp3: Tweak the probe scores
vf_frei0r: do not increment string if it reached the end
svq1dec: Unbreak the scratch buffer allocation
vaapi: wrap codec specific functions in appropiate #ifs
hevc: always clip luma_log2_weight_denom
prores: Evaluate all the quantizers
tiff: Check the check_size() return value and forward it
rtpdec_h263_rfc2190: Clear the stored bits if discarding buffered data
h261dec: Fix context initialization sequence
cmdutils: check file access functions return values
aacenc: correctly check returned value
lavfi: always check av_expr_parse_and_eval() return value
xsub: Support DXSA subtitles
mpeg4audio: check the init_get_bits() return value
segment: Fix the failure paths
swscale: check memory allocations
opt: check memory allocation
libavformat: Check for malloc failures in avformat_new_stream
Add myself to Uploaders
h264: restore a block mistakenly removed in e10fd08a
on2avc: check number of channels
smc: fix the bounds check
gifdec: refactor interleave end handling
mmvideo: check frame dimensions
jvdec: check frame dimensions
mjpegdec: check for pixel format changes
mov: avoid a memleak when multiple stss boxes are present
vc1: Do not assume seek happens after decoding
avconv: Use the mpeg12 private option scan_offset
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Git-Refname: refs/heads/master
X-Git-Reftype: branch
X-Git-Oldrev: e39ba7b703328fa7522d3f9ffa2c72ab12612f11
X-Git-Newrev: ee05a264780966003289945bd58658791f7a1fba

The following commit has been merged in the master branch:
commit f6b12c5d33a3c56953b7e7059f4682e29c7e1d96
Merge: 82584de3cabe67afb642d407aeb4b44a9d2b944f e39ba7b703328fa7522d3f9ffa2c72ab12612f11
Author: Sebastian Ramacher <sramacher at debian.org>
Date:   Mon Apr 20 20:27:53 2015 +0200

    Merge branch 'master' into experimental
    
    Conflicts:
    	debian/changelog
    	debian/control

diff --combined debian/changelog
index 67c031d,0129449..7d90331

--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,57 +1,63 @@@
- libav (6:11.1-2) UNRELEASED; urgency=medium
++libav (6:11.3-1) UNRELEASED; urgency=medium
 +
 +  * 
 +
 + -- Sebastian Ramacher <sramacher at debian.org>  Sat, 03 Jan 2015 23:35:19 +0100
 +
+ libav (6:11.3-1) unstable; urgency=medium
+ 
+   * New upstream release fixing multiple security issues.
+     - utvideodec: Handle slice_height being zero (CVE-2014-9604)
+     - adxdec: set avctx->channels in adx_read_header
+     - rmenc: limit packet size
+     - webp: validate the distance prefix code
+     - rv10: check size of s->mb_width * s->mb_height
+     - eamad: check for out of bounds read (CID/1257500)
+     - mdec: check for out of bounds read (CID/1257501)
+     - configure: Properly fail when libcdio/cdparanoia is not found
+     - tiff: Check that there is no aliasing in pixel format selection (CVE-2014-8544)
+     - aic: Fix decoding files with odd dimensions
+     - vorbis: Check the vlc value in setup_classifs
+     - arm: Suppress tags about used cpu arch and extensions
+     - prores: Extend the padding check to 16bit
+     - icecast: Do not use chunked post, allows feeding to icecast properly
+     - img2dec: correctly use the parsed value from -start_number
+     - h264_cabac: Break infinite loops
+     - hevc_deblock: Fix compilation with nasm (libav #795)
+     - h264: initialize H264Context.avctx in init_thread_copy
+     - h264: Do not share rbsp_buffer across threads
+     - h264: only ref cur_pic in update_thread_context if it is initialized
+     - matroskadec: Fix read-after-free in matroska_read_seek() (chromium #427266)
+     - log: Unbreak no-tty support on 256color terminals
+ 
+  -- Sebastian Ramacher <sramacher at debian.org>  Fri, 13 Mar 2015 23:27:25 +0100
+ 
+ libav (6:11.2-1) unstable; urgency=medium
+ 
+   * New upstream release fixing multiple security issues. (Closes: #773626)
+     - h264: restore a block mistakenly removed in e10fd08a
+     - on2avc: check number of channels (CVE-2014-8549)
+     - smc: fix the bounds check (CVE-2014-8548)
+     - gifdec: refactor interleave end handling (CVE-2014-8547)
+     - mmvideo: check frame dimensions (CVE-2014-8543)
+     - jvdec: check frame dimensions (CVE-2014-8542)
+     - mjpegdec: check for pixel format changes (CVE-2014-8541)
+     - mov: avoid a memleak when multiple stss boxes are present
+     - vc1: Do not assume seek happens after decoding
+     - avconv: Use the mpeg12 private option scan_offset (Closes: #773055)
+     - xsub: Support DXSA subtitles
+     - mp3dec: fix reading the Xing tag
+     - matroskaenc: write correct Display{Width, Height} in stereo encoding
+     - configure: Fix enabling memalign_hack automatically
+     - mp3enc: fix a triggerable assert
+     - latm: Do not give a score for a single instance
+     - mp3: Tweak the probe scores
+     - matroskaenc: write correct Display{Width, Height} in stereo encoding
+     - coverity: Fix most of the reported warnings and issues
+   * debian/control: Add myself to Uploaders.
+ 
+  -- Sebastian Ramacher <sramacher at debian.org>  Sat, 17 Jan 2015 20:56:19 +0100
+ 
  libav (6:11.1-1) unstable; urgency=medium
  
    * Team upload.

-- 
Libav/FFmpeg packaging

