faad2 (2.10.0-1~deb10u1) buster-security; urgency=medium
* Rebuild for buster, addresses multiple security issues
-- Moritz Mühlenhoff <jmm@debian.org> Thu, 24 Mar 2022 19:44:40 +0100
faad2 (2.10.0-1) unstable; urgency=medium
* New upstream version 2.10.0
* Bump Standards-Version to 4.5.0.
* Drop "-Wl,--as-needed" linker flag.
* Bump debhelper-compat to 13.
* Add "usr/lib/${DEB_HOST_MULTIARCH}/*.la" to debian/not-installed.
-- Fabian Greffrath <fabian@debian.org> Tue, 20 Oct 2020 21:45:18 +0200
faad2 (2.9.2-1) unstable; urgency=medium
* New upstream version 2.9.2
* Install pkg-config file.
* Rules-Requires-Root: no.
-- Fabian Greffrath <fabian@debian.org> Mon, 04 May 2020 22:05:34 +0200
faad2 (2.9.1-1) unstable; urgency=medium
[ Ondřej Nový ]
* Bump Standards-Version to 4.4.1
[ Fabian Greffrath ]
* New upstream version 2.9.1
-- Fabian Greffrath <fabian@debian.org> Mon, 04 Nov 2019 16:52:15 +0100
faad2 (2.9.0-1) unstable; urgency=medium
[ Ondřej Nový ]
* Use debhelper-compat instead of debian/compat
[ Fabian Greffrath ]
* Ack NMUs, thanks Hugo!
* Upstream moved to GitHub, adapt packaging accordingly.
* New upstream version 2.9.0.
* Remove all patches, applied upstream.
* Build reproducibly.
* Finish debug symbols package migration.
* Bump debhelper-compat to 12.
* Bump Standards-Version to 4.4.0.
* Add Build-Depends-Package line to the symbols file.
-- Fabian Greffrath <fabian@debian.org> Wed, 11 Sep 2019 20:28:04 +0200
faad2 (2.8.8-3.2) unstable; urgency=high
* Non-maintainer upload with maintainer's permission.
* debian/patches/gcc-9.patch: Fix build with GCC-9 (thanks Gianfranco
Costamagna for the patch) (Closes: #930363).
-- Hugo Lefeuvre <hle@debian.org> Sat, 31 Aug 2019 09:11:54 -0400
faad2 (2.8.8-3.1) unstable; urgency=medium
* Non-maintainer upload with maintainer's permission.
* CVE-2019-6956: Buffer over read in the function ps_mix_phase()
(libfaad/ps_dec.c) (Closes: #914641).
* CVE-2018-20196: Stack buffer overflow in the function calculate_gain
(libfaad/sbr_hfadj.c).
* CVE-2018-20199, CVE-2018-20360: NULL pointer dereference in the function
ifilter_bank (libfaad/filtbank.c).
-- Hugo Lefeuvre <hle@debian.org> Tue, 27 Aug 2019 13:29:39 -0400
faad2 (2.8.8-3) unstable; urgency=high
* Team upload.
* debian/patches: Cherry-pick patch to fix buffer overflows from VLC.
-- Sebastian Ramacher <sramacher@debian.org> Fri, 07 Jun 2019 20:07:34 +0200
faad2 (2.8.8-2) unstable; urgency=medium
[ Ondřej Nový ]
* d/copyright: Change Format URL to correct one
* d/control: Set Vcs-* to salsa.debian.org
* d/changelog: Remove trailing whitespaces
[ Felipe Sateler ]
* Change maintainer address to debian-multimedia@lists.debian.org
[ Ondřej Nový ]
* d/watch: Use https protocol
[ Fabian Greffrath ]
* Backport two patches from upstream to fix CVE-2018-20194 and
CVE-2018-20362, thanks Hugo Lefeuvre.
-- Fabian Greffrath <fabian@debian.org> Wed, 17 Apr 2019 11:50:29 +0200
faad2 (2.8.8-1) unstable; urgency=medium
* New upstream version 2.8.8
-- Fabian Greffrath <fabian@debian.org> Mon, 18 Dec 2017 21:28:02 +0100
faad2 (2.8.6-1) unstable; urgency=medium
* New upstream version 2.8.6
-- Fabian Greffrath <fabian@debian.org> Mon, 06 Nov 2017 17:05:46 +0100
faad2 (2.8.5-1) unstable; urgency=medium
* New upstream version 2.8.5
* Remove faad2_version.patch, upstream has changed the
FAAD2_VERSION macro to read 'unknown'.
* Refresh reproducible-build.patch.
* Add the NeAACDecGetVersion@Base symbol to the libfaad2.symbols file,
this function is supposed to be used to get the FAAD2 library
version at runtime.
* Update debian/copyright for recently added or removed source files.
* Bump Standards-Version to 4.1.0.
-- Fabian Greffrath <fabian@debian.org> Sat, 30 Sep 2017 14:29:31 +0200
faad2 (2.8.1-2) unstable; urgency=medium
* Set the FAAD2_VERSION macro back to the version string,
thanks Adrian Bunk (Closes: #868854).
+ In the next upstream release this macro will read "unknown version"
and an API will be provided to retrieve the actual library version
at run-time.
-- Fabian Greffrath <fabian@debian.org> Wed, 02 Aug 2017 20:46:57 +0200
faad2 (2.8.1-1) unstable; urgency=medium
* New upstream version 2.8.1.
+ Fixes multiple vulnerabilities: CVE-2017-9218,
CVE-2017-9219, CVE-2017-9220, CVE-2017-9221,
CVE-2017-9222, CVE-2017-9223, CVE-2017-9253,
CVE-2017-9254, CVE-2017-9255, CVE-2017-9256,
CVE-2017-9257 (Closes: #867724).
* Update debian/watch file.
* Refresh reproducible-build.patch.
* Remove debian/README.source and debian/gbp.conf files,
they do not apply anymore.
* Bump Standards-Version to 4.0.0.
* Bump debhelper compat to 10.
* Fix vcs-field-uses-insecure-uri lintian warnings.
* Enable all hardening flags.
* Update debian/copyright,
refer to MPL-1.1 in common-licenses.
* Drop obsolete faad2-dbg package.
-- Fabian Greffrath <fabian@debian.org> Mon, 17 Jul 2017 22:25:26 +0200
faad2 (2.8.0~cvs20161113-1) unstable; urgency=medium
* New upstream CVS snapshot.
+ Fixes implicit SBR detection via AudioSpecificConfig
on systems with unsigned char (Closes: #843173).
* Change Uploaders field to use my Debian account.
-- Fabian Greffrath <fabian@debian.org> Sun, 13 Nov 2016 17:45:15 +0100
faad2 (2.8.0~cvs20150510-1) unstable; urgency=medium
* New upstream CVS snapshot.
+ Does not crash when given ADTS AAC file with large ID3v2 tag anymore,
thanks Mike Crowe for the bug report and patch (Closes: #689712).
+ Does not crash with the Mayhem testcase anymore, thanks Alexandre Rebert
for the bug report (Closes: #715882).
* Add debian/README.source to document how the Debian source tarball was
created and force xz compression in debian/gbp.conf.
* Remove all patches that were either applied, solved differently or
disapproved upstream:
+ autotools-compat.patch: Disapproved upstream.
+ noinst-mp4ff.patch: Applied upstream.
+ manpage.patch: Applied upstream.
+ incorrect_pointer_size.patch: Does not apply anymore.
+ bpa-stdin.patch: Applied upstream.
+ path_max.patch: Applied upstream.
+ fix_ftbfs_with_gcc4.5.patch: Disapproved upstream.
+ symbol-visibility.patch: Does not apply anymore.
+ libfaad-drm.patch: Applied upstream.
* Ship upstream's own frontend and API documentation manpages.
* Update Debian packaging copyright years.
* Remove '__DATE__' CPP macro for reproducible builds.
-- Fabian Greffrath <fabian+debian@greffrath.com> Mon, 11 May 2015 13:59:49 +0200
faad2 (2.7-9) unstable; urgency=medium
* Build the DRM version of the library as well as the normal version,
thanks Julian Cable for the idea and the patch!
* Remove Andres Mejia from Uploaders (Closes: #743545).
* Remove "DM-Upload-Allowed" field from debian/control.
* Mark the faad2-dbg package as "Multi-Arch: same" and
remove faad ("Multi-Arch: no") from its Dependencies.
* Remove debian/source/local-options, they are default now.
* Add faad.lintian-overrides for a spelling error that is used
in the id3 specification.
* Fix "vcs-field-not-canonical" lintian warning.
* Fix "'visibility' attribute ignored on non-class types" compiler warnings
introduced by our symbol versioning patch.
* Fix most autotools warnings.
* Bump "Standards-Version" to 3.9.6.
* Run "wrap-and-sort -asb".
* Add extensive API documentation in libfaad.3, courtesy of Julian Cable.
-- Fabian Greffrath <fabian+debian@greffrath.com> Thu, 30 Apr 2015 18:04:42 +0200
faad2 (2.7-8) unstable; urgency=low
[ Fabian Greffrath ]
* debian/patches/path_max.patch:
+ Dynamically allocate file name buffers,
instead of relying on PATH_MAX.
* Set appropriate symbol visibility attributes.
* Rebuild autofoo with dh-autoreconf.
* Add debian/libfaad2.symbols file.
* Multi-Archify.
* Remove redundant license blurb from debian/copyright.
* libmp4ff ist not packaged, so do not install it either.
* Simplify debian/*.install accordingly.
[ Andres Mejia ]
* Make dev package multiarch installable.
* Bump to Standards-Version 3.9.3.
-- Andres Mejia <amejia@debian.org> Sun, 18 Mar 2012 09:07:55 -0400
faad2 (2.7-7) unstable; urgency=low
[ Andres Mejia ]
* Update to my @debian.org email.
* Update gbp.conf.
[ Reinhard Tartler ]
* Update Vcs-Browser field
* bump standards version (no changes needed)
[ Fabian Greffrath ]
* Convert to 3.0 (quilt) source format.
* Re-enable two patches that got lost in the 2.7-6 upload:
- debian/patches/bpa-stdin.patch
+ Apply SqueezeCenter patches from FreeBSD that enable streaming with
BBCiPlayer and ezstream (LP: #470562).
- debian/patches/path_max.patch
+ Extend file name buffers for longer path names (LP: #475050).
* Merge patch from 2.7-6ubuntu1:
- debian/patches/fix_ftbfs_with_gcc4.5.patch
+ Correctly declare lrintf in libfaad/common.h to avoid a conflict of
declaration in mathcalls.h to fix FTBFS on i386
* Improve debian/copyright.
-- Fabian Greffrath <fabian+debian@greffrath.com> Wed, 03 Aug 2011 14:19:49 +0200
faad2 (2.7-6) unstable; urgency=high
[ Alessio Treglia ]
* Fix segmentation fault in faad due to an incorrect pointer size
(Closes: #603807, LP: #665802).
* Add gbp config file.
[ Andres Mejia ]
* Revert changes in 2.7-5. Upload of 2.7-5 was unintentionally done.
* Refresh patches.
-- Andres Mejia <mcitadel@gmail.com> Mon, 22 Nov 2010 19:17:36 -0500
faad2 (2.7-5) unstable; urgency=low
* Update my e-mail address.
* Apply SqueezeCenter patches from FreeBSD that enable streaming with
BBCiPlayer and ezstream (LP: #470562).
* Extend file name buffers for longer path names (LP: #475050).
-- Fabian Greffrath <fabian+debian@greffrath.com> Mon, 16 Aug 2010 16:43:14 +0200
faad2 (2.7-4) unstable; urgency=low
* debian/control: Do not build the shared libmp4ff library packages
anymore (Closes: #550679). The use of mp4ff from faad2 is discouraged
by upstream, see <http://xbmc.org/trac/ticket/6882#comment:15>.
* Removed debian/patches/force-include-stdint_h.patch.
* Removed debian/patches/libmp4ff-shared-lib.patch.
* Removed debian/patches/70_automake-1.9.patch.
* Added debian/README.source.
* Bumped Standards-Version to 3.8.3.
* Raised Build-Depends to debhelper (>= 7.0.50~), thanks lintian.
* Removed debian/libmp4ff-dev.install and debian/libmp4ff0.install.
* Removed libmp4ff0 from Depends for faad2-dbg.
-- Fabian Greffrath <fabian@debian-unofficial.org> Mon, 26 Oct 2009 12:04:41 +0100
faad2 (2.7-3) UNRELEASED; urgency=low
* debian/patches/force-include-stdint_h.patch: New patch to force
inclusion of stdint.h (Closes: #550679).
-- Fabian Greffrath <fabian@debian-unofficial.org> Thu, 15 Oct 2009 18:00:41 +0200
faad2 (2.7-2) unstable; urgency=low
* upload to unstable.
-- Reinhard Tartler <siretart@tauware.de> Wed, 16 Sep 2009 21:07:45 +0200
faad2 (2.7-1) experimental; urgency=low
[ Andres Mejia ]
* New upstream release. (Closes: #515072)
* Verified all patches are either applied upstream, or a different
implementation is used.
+ (Closes: #505901)
+ (Closes: #503657)
* Switch to quilt.
* Add -DPIC for CFLAGS.
* Don't include dpatch.make in debian/rules.
* Update watch file to default DEHS would use.
* Bump to using debhelper 7.
* Use quilt (>= 0.46-7).
* Update control file.
* Add DM-Upload-Allowed: yes field.
* Don't include dummy package anymore.
* Add in description for libfaad2 that it contains shared library.
* Move libfaad-dev to the front to be 'default' package debhelper acts
on.
* Add ${misc:Depends} for all packages. Remove libc dev packages from
Depends.
* Add debug packages. (Closes: #516680)
* Rewrite debian/rules to use new debhelper and quilt.
* Rename <package>.files to <package>.install. Be more specific what
to include in libfaad-dev. Also include .install files for other packages.
* Add libmp4ff-dev package.
* Don't include version for rename of libfaad package. Place all debug
symbols for binary packages in faad2-dbg.
* Modify description for libmp4ff-dev.
* Update address to FSF in debian/copyright.
* Fix hyphen in manpage. Fixes lintian warning as well.
* Patch faad2 to create a shared lib for libmp4ff. (Closes: #485373)
* Allow to pass in more CFLAGS via DEB_CFLAGS.
* Add in DRM (Digital Radio Mondiale) support.
* Add Build-Depends of automake, autoconf, and autotools-dev.
[ Fabian Greffrath ]
* Add myself to Uploaders.
* Clean up Build-Depends: libid3-dev was only needed for the obsolete
XMMS plugin, autotools stuff shouldn't be needed at all.
* Untagle library file names in the install rules.
* Revert overriding of CFLAGS, dpkg-buildpackage will choose
appripriate settings. Revert running the entire autoreconf sequence
before calling ./configure. Build without DRM support, it has proven
to break base functionality.
* Clean up watch file.
* Make faad2-dbg and libmp4ff-dev depend on libmp4ff0.
* Improve short description for the libmp4ff\* packages.
* debian/patches/70_automake-1.9.patch: New patch, run automake-1.9 to
regenerate Makefile.in with the changes introduced by
debian/patches/libmp4ff-shared-lib.patch.
* Do not ship .la files in the development packages.
* Add reasonable defaults to CFLAGS/CXXFLAGS.
-- Fabian Greffrath <fabian@debian-unofficial.org> Wed, 03 Jun 2009 11:02:00 +0200
faad2 (2.6.1-3.1) unstable; urgency=high
* Non-maintainer upload by the security team
* Include upstream patch to fix heap overflow in the frontend code
(Closes: #499899)
-- Steffen Joeris <white@debian.org> Fri, 26 Sep 2008 12:02:35 +0000
faad2 (2.6.1-3) unstable; urgency=low
* Closes: #479802: Update man page to reflect on raw PCM is supported on
standard out. Also, have faad fail on trying to send non-raw PCM to
standard out.
* Apply new knowledge about the differences between hyphens, en-dashes, and
em-dashes to man pages.
* Move faad man page to patch system.
* Update standards version.
* Add license declarations and copyright declarations to copyright file.
Tidy up authors.
-- Matthew W. S. Bell <matthew@bells23.org.uk> Thu, 19 Jun 2008 02:35:47 +0100
faad2 (2.6.1-2) unstable; urgency=low
* Remove XMMS plugin as XMMS is being removed (Closes: #456724)
-- Matthew W. S. Bell <matthew@bells23.org.uk> Fri, 21 Dec 2007 00:04:17 +0000
faad2 (2.6.1-1) unstable; urgency=low
* Import new upstream version containing new license text
(Closes: #451948)
* Change build system to call autoreconf at build time, as
upstream no longer ships generated files
* Update debian/copyright to reflect new license text
* Remove Build-Depends on libsndfile1-dev (Closes: #452362)
-- Matthew W. S. Bell <matthew@bells23.org.uk> Wed, 28 Nov 2007 23:45:05 +0000
faad2 (2.6-1) unstable; urgency=low
* Import new 2.6 release. Includes several small off-by-one scale
fixes.
* Update the copyright as new code includes a clarification of the license
text, which indicates that the entire work is under the GPLv2 (closes:
#419339).
-- Matthew W. S. Bell <matthew@bells23.org.uk> Mon, 15 Oct 2007 00:16:21 +0100
faad2 (2.5-5) unstable; urgency=low
* Make packages depends bin-NMU safe
-- Matthew W. S. Bell <matthew@bells23.org.uk> Fri, 17 Aug 2007 16:07:59 +0100
faad2 (2.5-4) unstable; urgency=low
* Add mp4ff headers to libfaad-dev package (Closes: 409648)
-- Matthew W. S. Bell <matthew@bells23.org.uk> Fri, 11 May 2007 19:44:22 +0100
faad2 (2.5-3) unstable; urgency=low
* Add patch to stabilise/sanitise headers (Closes: 404279)
* Port several fixes from Ubuntu
* Add an mp4ff static library
-- Matthew W. S. Bell <matthew@bells23.org.uk> Sun, 15 Apr 2007 04:23:35 +0100
faad2 (2.5-2) unstable; urgency=low
* add xmms-mp4 desription read not like nonsense (Closes: #399457)
* Compile without Digital Radio Mondiale support, as it breaks base
functionality
* Update debian/copyright (See: #403117)
-- Matthew W. S. Bell <m.bell@bvrh.co.uk> Mon, 4 Dec 2006 19:56:22 +0000
faad2 (2.5-1) unstable; urgency=low
* Call make install with DESTDIR instead of prefix
* Change configure/Makefile to provide xmms config differently
* Add manual page for faad utility
* Call make uninstall in clean
* Add dummy libfaad2-0 pacakge to satisfy some third-party dependencies
* Upload into main (Closes: #306366)
-- Matthew W. S. Bell <m.bell@bvrh.co.uk> Wed, 18 Oct 2006 23:41:32 +0100
faad2 (2.5-0.0) unstable; urgency=low
* New upstream release.
* Add drm (Digital Radio Mondiale) support.
-- Christian Marillat <marillat@debian.org> Wed, 6 Sep 2006 20:18:25 +0200
faad2 (2.0.0+cvs20060416-0.1) unstable; urgency=low
* Rebuild for amd64.
-- Christian Marillat <marillat@debian.org> Sat, 13 May 2006 08:58:34 +0200
faad2 (2.0.0+cvs20060416-0.0) unstable; urgency=low
* CVS release.
-- Christian Marillat <marillat@debian.org> Sun, 16 Apr 2006 17:15:00 +0200
faad2 (2.0.0-0.7) unstable; urgency=low
* Rebuild for gcc 4.0
-- Christian Marillat <marillat@debian.org> Sat, 16 Jul 2005 17:34:28 +0200
faad2 (2.0.0-0.6) unstable; urgency=low
* New patch from Gentoo to fix amd64 problem with some files. Thanks to
Carl Schneidinger.
-- Christian Marillat <marillat@debian.org> Fri, 20 May 2005 18:42:23 +0200
faad2 (2.0.0-0.5) unstable; urgency=low
* Apply patch from Arnaud Rouanet to fix the -w option in faad.
-- Christian Marillat <marillat@debian.org> Mon, 21 Mar 2005 10:13:05 +0100
faad2 (2.0.0-0.4) unstable; urgency=low
* New patch 04_mp4ff.h to replace "mp4ff_int_types.h" include by <stdint.h>
-- Christian Marillat <marillat@debian.org> Wed, 9 Mar 2005 08:59:35 +0100
faad2 (2.0.0-0.3) unstable; urgency=low
* Add libfaac-dev in Build-Depends.
* Little hack to not build the mpeg4ip plugin.
-- Christian Marillat <marillat@debian.org> Wed, 26 Jan 2005 07:36:25 +0100
faad2 (2.0.0-0.2) unstable; urgency=low
* Build with libmp4
* Add new package xmms-mp4
-- Christian Marillat <marillat@debian.org> Mon, 25 Oct 2004 10:19:52 +0200
faad2 (2.0.0-0.1) unstable; urgency=low
* Really apply my patch to link against -lm
-- Christian Marillat <marillat@debian.org> Thu, 29 Jul 2004 15:48:22 +0200
faad2 (2.0.0-0.0) unstable; urgency=low
* New upstream release.
-- Christian Marillat <marillat@debian.org> Sun, 4 Jul 2004 00:26:23 +0200
faad2 (2.0-rc3-0.0) unstable; urgency=low
* New upstream release.
-- Christian Marillat <marillat@debian.org> Tue, 9 Dec 2003 10:57:01 +0100
faad2 (1.1-0.0) unstable; urgency=low
* Initial Release.
-- Christian Marillat <marillat@debian.org> Sun, 29 Dec 2002 23:09:33 +0100