xine-lib 1.1.10-1~gutsy1 source package in Ubuntu

Changelog

xine-lib (1.1.10-1~gutsy1) gutsy-backports; urgency=low

  * Automated backport upload; no source changes.

xine-lib (1.1.10-1) unstable; urgency=high

  * New upstream release (Closes: #459836)...
  * ... fixing some security bugs:
    - CVE-2008-0225: Heap-based buffer overflow in rmff_dump_cont function
      which allows remote attacker to execute arbitrary code via a crafted
      SDP Abstract attribute (Closes: #460551).
      This also acks 1.1.8-3+lenny1 (NMU by the security team).
    - Related to CVE-2006-1664: Buffer overflow which allows a remote
      attacker to execute arbitrary code or crash the client program via a
      crafted ASF header.
  * ... and fixing some other bugs, including:
    - Disappearing audio. (Closes: #461970)

  [ Darren Salt ]
  * Build-depend on gs-gpl | gs. Avoids FTBFS where recommended packages
    aren't automatically installed.
  * Put libxine1-doc in section libdevel.
  * Move libxine1-doc | libxine-doc to Suggests: in libxine1. (Closes: #458103)
  * Add postinst scripts to ensure that the documentation symlinks are
    properly created. (This is really dpkg bugginess.) (Closes: #458865)
  * Standards version 3.7.3; no changes needed.

  [ Reinhard Tartler ]
  * Actually install xineplug_decode_w32dll.so and xineplug_decode_qt.so
    on i386. debian/rules accidentally used $< where it should have been
    $^. Thanks to Gert Kulyk for reporting!                  LP: #182400
  * Fix XS-Hg-VCS headers in debian/control                  LP: #183886

xine-lib (1.1.9-1) unstable; urgency=low

  * New upstream release.

  [Darren Salt]
  * Re-enable the pulseaudio plugin.

  [Reinhard Tartler]
  * Remove really unnecessary versioned build depends on binutils. Even
    oldstable (sarge) has a newer version available.
  * Bug fix: "unable to handle ipv6 MRLs", thanks to Mau (Closes:
    #448801).

xine-lib (1.1.8-5) unstable; urgency=low

  [Darren Salt]
  * Build fix: avoid lots of "make install" invocations (introduced in -4).
  * Fix dependency issues with respect to documentation symlinks.
    The problem was an incorrect debian/shlibs.local.	(Closes: #457328)
  * Use a symlink for libxine1-dbg's documentation (this got missed in -4).
  * libxine1-bin (-4) should have contained AUTHORS. This is fixed.

xine-lib (1.1.8-4) unstable; urgency=low

  [Darren Salt]
  * libxine1-dbg was missing some debug symbols. Fixed by building it after
    xine-lib's other arch:any packages.
  * Introduce a new package, libxine1-bin, which contains the binaries
    formerly in libxine1. Dependencies are moved and updated accordingly.
    thanks to Bill Allombert.  (Closes: #454267)
  * Except for libxine1-doc, libxine1-bin and libxine-dev, symlink to
    libxine1-bin's documentation. (AUTHORS is now in libxine1-bin.)
  * Backported patches from upstream 1.1 branch:
    - Fix compilation of DXR3 support with external ffmpeg.
      This is currently only needed for compilation against libavcodeccvs-dev
      (from debian-multimedia). Untested with actual DXR3 hardware since I
      have none.                                           (cset e55bc398cc7c)
    - Fix a problem with non-seekable Flash video          (cset de8c671a419c)
    - Fix "missing" channels.conf with ATSC                (cset fd875c4a15bc)
    - Fix a possible crash when changing channels (DVB)    (cset bf1ec833d87a)
    - Don't stop reading Ogg streams early                 (cset e4c8ac4a6b49)
    - Fix a possible crash when a video output is closed   (cset 06494c094761)
    - Fix a possible crash when video playback is finished (cset 293845e465cc)

  [ Reinhard Tartler ]
  * Bug fix: "FTBFS with GCC 4.3: missing #includes", thanks to Martin
    Michlmayr and Daniel Schepler (Closes: #455438, #455322).
  * Bug fix: "libxine1-plugins: should not depend on libxine1-gnome",
    thanks to Hermogenes Hebert Pereira Oliveira. (Closes: #454162).
    Instead, a new package is introduced: libxine1-all-plugins, which
    additionally depends on the gnome plugin.
  * remove the jack plugin. According to upstream it is unfinished and of
    poor quality. A rewrite is available in the 1.2 branch.
  * adjust dependencies on libxine1-dev and libxine1-dbg
  * add XS-DM-Upload-Allowed: yes field to debian/control
  * Bug fix: "xine-lib: FTBFS on GNU/kFreeBSD (debian specific part)",
    thanks to Petr Salinger (Closes: #449531). Patch applied with some
    (minor) modifications.
  * Bug fix: "libxine1: FTBFS on GNU/kFreeBSD", thanks to Uwe Hermann
    (Closes: #438849). Patch taken from upstream hg repo, cset
    1db8870cd7c9
  * Bug fix: "typo "A various plugins" in package description",
    thanks to Philippe Cloutier (Closes: #455067).

xine-lib (1.1.8-3+lenny1) testing-security; urgency=high

  * Non-maintainer upload by security team.
  * This update addresses the following security issue:
    - CVE-2008-0225: Heap-based buffer overflow in rmff_dump_cont function
    which allows remote attacker to execute arbitrary code via a crafted
    SDP Abstract attribute (Closes: #460551).

xine-lib (1.1.8-3) unstable; urgency=low

  [Darren Salt]
  * Patches from the 1.1.9 dev tree:
    - Silence "lacing: N" messages from the matroska demuxer.
    - Extra identifier for MPEG video (in AVIs etc.).
  * Tighten the dependencies of libxine1 and libxine1-plugins on libxine1-*
    packages.
  * Move deps on libxine1-{x,console} from libxine1-plugins to libxine1 to
    avoid further problems such as bug 448077.

  [ Reinhard Tartler ]
  * remove gs from build-deps
  * don't build the pulseaudio plugin. (Closes: #452211, #427991)

 -- John Dong <email address hidden>   Mon, 18 Feb 2008 21:34:08 +0000