lp://staging/ubuntu/gutsy-security/gst-plugins-good0.10

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

32. By Marc Deslauriers on 2009-03-10

* SECURITY UPDATE: Remote code execution via crafted Composition Time To
  Sample (ctts) atom data in quicktime demuxer (LP: #325261)
  - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure j
    never goes past stream->n_samples in gst/qtdemux/qtdemux.c.
  - CVE-2009-0386
* SECURITY UPDATE: Remote code execution via crafted Sync Sample (aka stss)
  atom data in quicktime demuxer (LP: #325261)
  - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure index
    is bigger than 0 and never goes past stream->n_samples in
    gst/qtdemux/qtdemux.c. Also, safely free stream->samples and
    stream->segments.
  - CVE-2009-0387
* SECURITY UPDATE: Remote code execution via crafted Time-to-sample (aka stts)
  atom data in quicktime demuxer (LP: #325261)
  - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure i and
    index never go past stream->n_samples in gst/qtdemux/qtdemux.c.
  - CVE-2009-0397

31. By Jamie Strandboge on 2008-05-07

* SECURITY UPDATE: array index vulnerability (LP: #218652)
* debian/patches/04_SECURITY_CVE-2008-1686.patch: fix for
  ext/speex/gstspeexdec.c to properly validate its input
* References
  CVE-2008-1686

30. By Sebastian Dröge on 2007-09-21

* debian/patches/03_gconfsink_state_changes.patch:
  + Fix errors while changing the state of the gconf sink. Patch from
    upstream CVS, see http://bugzilla.gnome.org/show_bug.cgi?id=471364 .

29. By Matthew Garrett <email address hidden> on 2007-09-18

Ensure that the package is properly cleaned before build

28. By Matthew Garrett <email address hidden> on 2007-09-07

Bring the v4l2 code up to ~ current CVS - the 0.10.6 version seems
to handle various hardware badly (such as the USB iSight)

27. By Sebastian Dröge on 2007-06-20

New upstream release, "Wobble Board".

26. By Sebastian Dröge on 2007-06-17

* debian/control.in:
  + Make the Conflicts Replaces as they should be and also add them on the
    -dbg package.

25. By Sebastian Dröge on 2007-06-16

* New upstream pre-release
* debian/rules,
  debian/build-deps.in:
  + Update build dependencies.
* debian/gstreamer-plugins-good.install,
  debian/control.in:
  + Add wavpack, videocrop, monoscope, gamma and qtdemux plugins.
    Add Replaces with gst-plugins-bad for this.
* debian/patches/20_gstavidemux-error-out-on-pull_range.patch:
  + Dropped, merged upstream.

24. By Sebastian Dröge on 2007-05-03

* debian/build-deps.in:
  + Build depend on gstreamer-tools (>= 0.10.12-4ubuntu2) to get the new
    dh_gstscancodecs.

23. By Sebastian Dröge on 2007-05-02

* Sync with Debian:
  + debian/control.in:
    - Set Ubuntu Core Developers as Maintainer.
  + debian/build-deps.in:
    - Remove type-handling.
    - Build depend on gstreamer-tools (>= 0.10.11cvs20070110) for
      dh_gstscancodecs.
  + debian/gstreamer-plugins-good.install:
    - Don't use type-handling but always use v4l2 plugin.
  + debian/patches/01_esdsink-priority.patch:
    - Fix the rank of esdsink.
  + debian/rules:
    - Don't use type-handling.
    - Set package origin and url for Ubuntu.
    - Call dh_gstscancodecs.