Change logs for mplayer source package in Gutsy

mplayer (2:1.0~rc2-0ubuntu1~gutsy1) gutsy-backports; urgency=low

  * Automated backport upload; no source changes.

mplayer (2:1.0~rc2-0ubuntu1) hardy; urgency=low

  * New upstream version.
    - Packaging (LP: #150925)
    - MP3 Distortion (LP: #85751)
    - Aspect ratio fixes (LP: #103038, #153543)
    - Samba support (LP: #85052)
  * Move 01_default_config.dpatch into bzr.
  * Drop dpatch from build-depends and debian/rules
  * Add liblzo2-dev, libdvdnav-dev, libopenal-dev,
    libjack-dev, libtwolame-dev, libsvga1-dev to build dependencies.
  * debian/rules:
    - Build with radio interface support
    - Build with OpenAL, Jack audio support. (LP: #122042)
    - Let Xvid support be autodetected for proper linking.
    - Let Faac support be autodetected for proper linking.
    - Let fontconfig support be autodetected for proper linking.
    - Let LIVE555 support be autodetected for proper linking.
    - Drop DOCS/zh from dh_installdocs
    - Build with dvdnav support.
    - Adjust changelog that gets installed.
  * Add polish translation for .desktop file (LP: #93382)
  * Adjust configure script to properly link dbus-glib and pulse audio.
  * Disable joystick by default (LP: #75925)
  * Adjust configure script to call dvdnav-config properly.

 -- John Dong <email address hidden>   Mon, 19 Nov 2007 06:38:08 +0000

mplayer (2:1.0~rc1-0ubuntu13.3) gutsy-security; urgency=low

  * SECURITY UPDATE: Multiple integer underflows in MPlayer 1.0_rc2 and
    earlier allow remote attackers to cause a denial of service
    (process termination) and possibly execute arbitrary code via a
    crafted video file that causes the stream_read function to read or
    write arbitrary memory (LP: #279030)
    - libmpdemux/demux_real.c: Address various integer underflows. Patch
      from oCert.org.
    - http://www.ocert.org/advisories/ocert-2008-013.html
    - CVE-2008-3827
  * SECURITY UPDATE: Uncontrolled array index in the sdpplin_parse function in
    stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to
    overwrite memory and execute arbitrary code via a large streamid SDP
    parameter. (LP: #212601).
    - Cherrypicked rev 80 from lp:~ubuntu-dev/mplayer/ubuntu (William Grant)
      stream/realrtsp/sdpplin.c: Properly check the stream ID. Patch from
      upstream.
    - CVE-2008-1558

 -- Stefan Lesicnik <email address hidden>   Fri, 10 Oct 2008 20:55:42 +0200

mplayer (2:1.0~rc1-0ubuntu13.2) gutsy-security; urgency=low

  * SECURITY UPDATE: buffer overruns in RMMF, CDDB, MOV demuxer, FLAC header
    parser, and URL parser. (LP: #191488)
  * stream/librtsp/rtsp_session.c, stream/realrtsp/rmff.c,
    stream/realrtsp/rmff.h, libmpdemux/demux_audio.c, libmpdemux/demux_mov.c,
    stream/stream_cddb.c, stream/url.c: Patches from upstream.
  * References:
    - CVE-2008-0225
    - CVE-2008-0238
    - CVE-2008-0485
    - CVE-2008-0486
    - CVE-2008-0629
    - CVE-2008-0630

 -- William Grant <email address hidden>   Sat, 08 Mar 2008 21:14:04 +1100

mplayer (2:1.0~rc1-0ubuntu13.1) gutsy-security; urgency=low

  * SECURITY UPDATE: buffer overrun in mpdemux code (LP: #140891).
  * libmpdemux/aviheader.c: Apply upstream patch.
  * References:
    - CVE-2007-4938

 -- William Grant <email address hidden>   Tue, 06 Nov 2007 17:20:30 +1100

mplayer (2:1.0~rc1-0ubuntu13) gutsy; urgency=low

  * 01_default_config.dpatch: Fix typo that prevent the screensaver to be
    disabled (LP: #152080)

 -- Laurent Bigonville <email address hidden>   Sat, 13 Oct 2007 14:28:11 +0200

mplayer (2:1.0~rc1-0ubuntu12) gutsy; urgency=low

  * Add 01_default_config.dpatch.
    - Sets screensaver by default for non gmplayer.
      (LP: #95038), (LP: #139770)
    - Sets xv as video output for gmplayer and mplayer.
      (LP: #65165), (LP: #146307)
  * Add dpatch to build-depends in debian/control.
  * Add dpatch support to debian/rules.

 -- Mario Limonciello <email address hidden>   Mon, 08 Oct 2007 01:07:53 -0500

mplayer (2:1.0~rc1-0ubuntu11) gutsy; urgency=low

  * Added Network Audio System (NAS) support  (LP: #110151)

 -- Alfredo Matos <email address hidden>   Thu, 07 Jun 2007 21:53:04 +0100

mplayer (2:1.0~rc1-0ubuntu10) gutsy; urgency=low

  * SECURITY UPDATE: Upstream fix for CVE 2007-2948. Fixes a buffer overrun in
    the cddb code. (LP: #118855)

 -- William Grant <email address hidden>   Wed, 06 Jun 2007 17:22:22 +1000

mplayer (2:1.0~rc1-0ubuntu9) feisty; urgency=low

  * Rebuild to get correct version of libdirectfb
  * Modified Maintainer value to match Debian-Maintainer-Field Spec

 -- Sarah Hobbs <email address hidden>   Mon,  9 Apr 2007 21:55:23 +1000