Comment 2 for bug 1647226

Revision history for this message
Andreas Cadhalpun (andreas-cadhalpun) wrote : Re: FFmpeg security fixes December 2016

There has been another release fixing bugs in network code:

version 2.8.10
- avformat/http: Match chunksize checks to master..3.0
- Changelog: fix typos
- ffserver: Check chunk size
- Avoid using the term "file" and prefer "url" in some docs and comments
- avformat/rtmppkt: Check for packet size mismatches
- zmqsend: Initialize ret to 0
- configure: check for strtoull on msvc
- http: move chunk handling from http_read_stream() to http_buf_read().
- http: make length/offset-related variables unsigned.

Attached is the new debdiff. (git repo is at [1])

Testing performed (in a xenial chroot):
 * build including test suite works
 * installation works
 * upgrade works
 * autopkgtests pass

1: https://anonscm.debian.org/cgit/pkg-multimedia/ffmpeg.git/log/?h=xenial