[SCM] libav/jessie: New upstream release

sramacher at users.alioth.debian.org sramacher at users.alioth.debian.org
Sun May 31 22:11:43 UTC 2015


The following commit has been merged in the jessie branch:
commit 88e65fce8eddc01ea1303e498d2ff11e0599ebc6
Author: Sebastian Ramacher <sramacher at debian.org>
Date:   Mon Jun 1 00:10:24 2015 +0200

    New upstream release

diff --git a/debian/changelog b/debian/changelog
index 8630242..d2c1c35 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,42 @@
+libav (6:11.4-1~deb8u1) UNRELEASED; urgency=high
+
+  * New upstream release fixing multiple security issues.
+    - h264: Make sure reinit failures mark the context as not initialized (CVE-2015-3417)
+    - msrle: Use FFABS to determine the frame size in msrle_decode_pal4 (CVE-2015-3395)
+    - cavs: Remove an unneeded scratch buffer
+    - configure: Disable i686 for i586 and lower CPUs (debian/783082)
+    - mjpegenc: Fix JFIF header byte ordering (bug/808)
+    - nut: Make sure to clean up on read_header failure
+    - png: Set the color range as full range
+    - avi: Validate sample_size
+    - nut: Check chapter creation in decode_info_header
+    - alac: Reject rice_limit 0 if compression is used
+    - ape: Support _0000 files with nblock smaller than 64
+    - mux: Do not leave stale side data pointers in ff_interleave_add_packet()
+    - avresample: Reallocate the internal buffer to the correct size (bug/825)
+    - mpegts: Update the PSI/SI table only if the version change
+    - rtsp: Make sure we don't write too many transport entries into a fixed-size array
+    - rtpenc_jpeg: Handle case of picture dimensions not dividing by 8
+    - mov: Fix little endian audio detection
+    - x86: Put COPY3_IF_LT under HAVE_6REGS (gentoo/541930)
+    - roqvideoenc: set enc->avctx in roq_encode_init
+    - mp3: Properly use AVCodecContext API
+    - libvpx: Fix mixed use of av_malloc() and av_reallocp()
+    - Revert "lavfi: always check av_expr_parse_and_eval() return value"
+    - alsdec: only adapt order for positive max_order
+    - alsdec: check sample pointer range in revert_channel_correlation
+    - aacpsy: correct calculation of minath in psy_3gpp_init
+    - alsdec: limit avctx->bits_per_raw_sample to 32
+    - aasc: return correct buffer size from aasc_decode_frame
+    - matroskadec: fix crash when parsing invalid mkv
+    - avconv: do not overwrite the stream codec context for streamcopy
+    - webp: ensure that each transform is only used once
+    - h264_ps: properly check cropping parameters against overflow
+    - hevc: zero the correct variables on invalid crop parameters
+    - hevc: make the crop sizes unsigned
+
+ -- Sebastian Ramacher <sramacher at debian.org>  Mon, 01 Jun 2015 00:08:12 +0200
+
 libav (6:11.3-1+deb8u1) jessie; urgency=medium
 
   * Fix use of illegal instruction on i586. (Closes: #783082)

-- 
Libav/FFmpeg packaging



More information about the pkg-multimedia-commits mailing list