ffmpeg | branch: release/0.10 | Reinhard Tartler <siret...@tauware.de> | Wed Aug 6 20:24:20 2014 -0400| [a79e58cdc6e46c62346d13e7ddd4da2008714200] | committer: Reinhard Tartler
Update Changelog for v0.8.14 > http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a79e58cdc6e46c62346d13e7ddd4da2008714200 --- Changelog | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/Changelog b/Changelog index 5ba4bf1..b1b7183 100644 --- a/Changelog +++ b/Changelog @@ -1,6 +1,26 @@ Entries are sorted chronologically from oldest to youngest within each release, releases are sorted from youngest to oldest. +version 0.8.14: + +- error_concealment: avoid using the picture if not fully setup (CVE-2013-0860) +- svq1: do not modify the input packet +- cdgraphics: do not return 0 from the decode function +- cdgraphics: switch to bytestream2 (CVE-2013-3674) +- huffyuvdec: check width size for yuv422p (CVE-2013-0848) +- mmvideo: check horizontal coordinate too (CVE-2013-3672) +- huffyuv: Check and propagate function return values (CVE-2013-0868) +- twinvq: fix out of bounds array access +- h264: slice-mt: check master context for valid current_picture_ptr +- h264: prevent theoretical infinite loop in SEI parsing (CVE-2011-3946) +- h264_sei: check SEI size +- pgssubdec: Check RLE size before copying (CVE-2013-0852) +- x86: Fix linking with some or all of yasm, mmx, optimizations disabled +- cmdutils: Conditionally compile libswscale-related bits +- video4linux2: Avoid a floating point exception +- vf_select: Drop a debug av_log with an unchecked double to enum conversion +- eamad: use the bytestream2 API instead of AV_RL (CVE-2013-0851) + version 0.8.13: - lzo: Handle integer overflow _______________________________________________ ffmpeg-cvslog mailing list ffmpeg-cvslog@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog