lp://staging/ubuntu/intrepid-security/vlc

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

50. By Marc Deslauriers on 2009-06-28

* SECURITY UPDATE: Arbitrary code execution via stack-based overflow in
  the Ty demux plugin (LP: #285922)
  - debian/patches/901_CVE-2008-4654.patch: don't overflow mst_buf in
    modules/demux/ty.c
  - CVE-2008-4654
* SECURITY UPDATE: Arbitrary code execution via integer overflows in
  the Ty demux plugin (LP: #285922)
  - debian/patches/902_CVE-2008-4686.patch: make some variables unsigned
    in modules/demux/ty.c so they don't overflow.
  - CVE-2008-4686
* SECURITY UPDATE: Arbitrary code execution via stack-based buffer
  overflow via invalid RealText subtitle file.
  - debian/patches/903_CVE-2008-5036.patch: limit sscanf sizes in
    modules/demux/subtitle.c
  - CVE-2008-5036
* SECURITY UPDATE: Arbitrary code execution via heap-based buffer
  overflow via malformed RealMedia file.
  - debian/patches/904_CVE-2008-5276.patch: replace malloc with calloc in
    modules/demux/real.c
  - CVE-2008-5276
* SECURITY UPDATE: Denial of service via long input argument.
  - debian/patches/905_CVE-2009-1045.patch: make sure we can't overflow
    psz_dup in src/input/input.c
  - CVE-2009-1045

49. By Jamie Strandboge on 2009-02-24

* SECURITY UPDATE: Fix buffer overflow in CUE image file support
  - Patch from upstream Rémi Denis-Courmont (LP: #294243)
  - CVE-2008-5032

48. By Reinhard Tartler on 2008-10-13

* link vlc to unicode enabled curses library. Thanks to Rafaël Carré for
  reporting.(LP: #282644)
* enable emedded video (LP: #282582)
* Autodetect screen while using Xinerama to toggle fullscreen (LP: #115419)

47. By Alexander Sack on 2008-10-13

* add new plugin database meta fields Xb-Npp-Description and Xb-Npp-File
  - update debian/control
* link plugin binary to /usr/lib/xulrunner-addons/plugins/
  - update debian/mozilla-plugin-vlc.links

46. By Reinhard Tartler on 2008-10-12

* merge from debian/experimental
* New upstream release fixes LP: #280081, #280378
* remaining changes:
  - build against libxul-dev instead of iceape-dev
  - build against libdca-dev, libass-dev and libx264-dev
  - adjust Vcs-Bzr Headers in debian/control
  - add Xb-Npp header to vlc package
  - debian/patches/301_DVD_media.diff: Change %U to %f
     in VLC .desktop file, cf LP #275043

45. By Reinhard Tartler on 2008-09-27

[ Reinhard Tartler ]
* new upstream bugfix only Releases LP: #274721

Relevant fixes from NEWS file:

  Various bugfixes:
 * Fixed DTS channel order on 5.1 systems
 * Fixed pausing behavior for subtitles and for Audio-CD
 * Multiple subtitles and podcast fixes
 * Various crashes fixed in PS, SSA, mkv, xspf, freetype
 * Fixed update system bugs
 * Other bug fixes (dvd language selection, subtitle colours, HTTP keep-alive...)

Qt4 interface:
 * Added Faster/Slower icons to the controller panel
 * Fixed lost playlist columns when switching the playlist view
 * Added needed options to Simple preferences (to avoid NVIDIA drivers issues)
 * Fullscreen controller: added time label, remembering of last position
 * Fixed drag'n drop behaviour on the playlist
 * Multiple other fixes (Enter hotkey in preferences, Skins selection...)

[ Saïvann Carignan ]
* debian/patches/301_DVD_media.diff: Change %U to %f
  in VLC .desktop file . (LP: #275043)

44. By Reinhard Tartler on 2008-09-26

* remove spurious conflicts on libvlc2. LP: #274614
* fix FTBFS on all archs other than i386/lpia and amd64. Patch from
  pkg-multimedia svn, Closes: #499860

43. By Reinhard Tartler on 2008-09-17

* New Upstream Release, exception granted by
    - dktrkranz, norsetto, Hobbsee (via irc). LP: #270404

Changes done in ubuntu:

* add libxul-dev to build-depends
* make sure that vlc is build against libxul in configure. This doesn't
  change anything in the package, but makes it more robust if building
  in an 'unclean' chroot or when modifying the package.
* debian/control: make Vcs-* fields point to the motumedia branch
* add libx264-dev and libass-dev to build-depends
  LP: #210354, #199870
* actually enable libass support by passing --enable-libass to configure
* enable libdca: add libdca-dev to build depends and --enable-libdca
* install the x264 plugin.

Changes already in the pkg-multimedia branch in debian:

* don't install usr/share/vlc/mozilla in debian/mozilla-plugin-vlc.install
* new upstream .desktop file now registers flash video mimetype LP: #261567
* add Xb-Npp-Applications to mozilla-plugin-vlc
* remove duplicate entries in debian/vlc-nox.install

42. By William Grant on 2008-07-06

* Merge from Debian unstable. (LP: #238873, #243450, #245563)
  Remaining changes:
  - Add PulseAudio support.
  - Enable (and build-depend on) x264 support.
  - Add Xb-Npp-.* fields to mozilla-plugin-vlc, for the Firefox plugin
    finder service.
  - Clean up debian/vlc.desktop.
  - Make vlc recommend vlc-plugin-pulse.
  - Install link to plugin in xulrunner 1.9 plugin directory.
  - Build against xul rather then iceape.
  - Rename the upstream tarball to match old Ubuntu convention.
  - Modify Maintainer value to match the DebianMaintainerField
    specification.

41. By William Grant on 2008-06-22

* Rebase on sid. Changes carried over:
  - Add PulseAudio support.
  - Enable (and build-depend on) x264 support.
  - Add Xb-Npp-.* fields to mozilla-plugin-vlc, for the Firefox plugin
    finder service.
  - Clean up debian/vlc.desktop.
  - Make vlc depend on vlc-plugin-pulse.
  - Install link to plugin in xulrunner 1.9 plugin directory.
* Build against xul rather then iceape.
  - Build-Depend on libxul-dev rather than iceape-dev.
  - Disable debian/patches/010_iceape.diff.
* Reduce vlc-plugin-pulse dependency to a recommendation, as everything
  now installs recommends by default.
* Update PulseAudio patch to include autotools changes, so we don't
  regenerate them during the build.
* Rename the upstream tarball. This can go away when >0.8.6.* is uploaded.
  The '+zdebian' can be dropped when >0.8.6.e is in Debian.
* Modify Maintainer value to match the DebianMaintainerField
  specification.