Module: libav.org Branch: master Commit: 2ca2e095c9f3238e06e51a65df6eb170ea511452
Author: Reinhard Tartler <[email protected]> Committer: Reinhard Tartler <[email protected]> Date: Sat Feb 16 09:45:09 2013 +0100 0.5.10 released --- src/download | 24 ++++++++++++------------ src/news | 42 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 54 insertions(+), 12 deletions(-) diff --git a/src/download b/src/download index b0a2c93..67180a8 100644 --- a/src/download +++ b/src/download @@ -299,25 +299,25 @@ Libav 0.6.6 "Works with HTML5"</h2> </p> <a name="release_0.5"></a><h2> -Libav 0.5.9 "half-way to world domination A.K.A. the belligerent blue bike +Libav 0.5.10 "half-way to world domination A.K.A. the belligerent blue bike shed"</h2> <p> -0.5.9 appeared on 2012-06-09. It is the latest point release from the 0.5 +0.5.10 appeared on 2013-02-16. It is the latest point release from the 0.5 release branch cut on 2009-03-02. </p> <p> -<a href="releases/libav-0.5.9.tar.xz">Download XZ tarball</a> -<a href="releases/libav-0.5.9.tar.xz.md5">MD5</a> -<a href="releases/libav-0.5.9.tar.xz.sha1">SHA1</a> -<a href="releases/libav-0.5.9.tar.xz.asc">PGP signature</a><br /> -<a href="releases/libav-0.5.9.tar.gz">Download gzip tarball</a> -<a href="releases/libav-0.5.9.tar.gz.md5">MD5</a> -<a href="releases/libav-0.5.9.tar.gz.sha1">SHA1</a> -<a href="releases/libav-0.5.9.tar.gz.asc">PGP signature</a><br /> -<a href="releases/libav-0.5.9.changelog">Changelog</a><br /> -<a href="releases/libav-0.5.9.release">Release Notes</a> +<a href="releases/libav-0.5.10.tar.xz">Download XZ tarball</a> +<a href="releases/libav-0.5.10.tar.xz.md5">MD5</a> +<a href="releases/libav-0.5.10.tar.xz.sha1">SHA1</a> +<a href="releases/libav-0.5.10.tar.xz.asc">PGP signature</a><br /> +<a href="releases/libav-0.5.10.tar.gz">Download gzip tarball</a> +<a href="releases/libav-0.5.10.tar.gz.md5">MD5</a> +<a href="releases/libav-0.5.10.tar.gz.sha1">SHA1</a> +<a href="releases/libav-0.5.10.tar.gz.asc">PGP signature</a><br /> +<a href="releases/libav-0.5.10.changelog">Changelog</a><br /> +<a href="releases/libav-0.5.10.release">Release Notes</a> </p> <a name="distros"></a><h1>Distribution Status</h1> diff --git a/src/news b/src/news index 9fe3715..1d5a02d 100644 --- a/src/news +++ b/src/news @@ -1,5 +1,47 @@ <h1>News</h1> +<a name="0.5.10"></a><h3>February 16, 2013</h3> + +<p> +We have just finalized another point release from our 0.5 release branch: +<a href="download.html#release_0.5">Libav 0.5.10</a>. This is another +maintenance-only release that addresses a number of security issues, +such as: +</p> + +<ul> +<li>mpeg12: do not decode extradata more than once (CVE-2012-2803)</li> +<li>vp6: properly fail on unsupported feature (CVE-2012-2783)</li> +<li>vp56: release frames on error (CVE-2012-2783)</li> +<li>shorten: Use separate pointers for the allocated memory for decoded samples (CVE-2012-0858)</li> +<li>cavsdec: check for changing w/h (CVE-2012-2777 and CVE-2012-2784)</li> +<li>avidec: use actually read size instead of requested size CVE-2012-2788</li> +<li>avsdec: Set dimensions instead of relying on the demuxer (CVE-2012-2801)</li> +</ul> + +<p> +In addition, further bug fixes have been made: +</p> + +<ul> +<li>yuv4mpeg: return proper error codes <a href="http://bugzilla.libav.org/show_bug.cgi?id=373";>(Bug 373)</a></li> +<li>bmpdec: only initialize palette for pal8 <a href="http://bugzilla.libav.org/show_bug.cgi?id=367";>(Bug 367)</a></li> +</ul> + +<p> +Distributors and system integrators are encouraged to update and share their +patches against our release branches. +</p> + +<p> +We intend to discontinue updates for the 0.5 release branch unless there +is significant demand for an 0.5.11 release. If such a release becomes +necessary in the future, please do not hesitate to get in contact with +us, preferably via email or via a bugzilla entry. Otherwise, this is +most likely the last update of this release branch. +</p> + + <a name="drop0.6"></a><h3>February 9, 2013</h3> <p> _______________________________________________ libav-commits mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-commits
