CVE-2014-9317 out-of-bounds access in PNG decoder
CVE-2014-9316 out-of-bounds access in MJPEG decoder
CVE-2014-9603 out-of-bounds access in Sierra VMD decoder
CVE-2014-9604 out-of-bounds access in Ut Video decoder
and other small bugfixes
1.2.11 was released on 2014-12-19. It is the latest stable FFmpeg
release from the 1.2 release branch, which was cut from master on
2013-03-07. Amongst lots of other changes, it includes all changes
from ffmpeg-mt, libav master of 2013-03-07, libav 9 as of 2013-03-07.
Add -mstackrealign -mpreferred-stack-boundary=4 to CFLAGS on i386 for all
gcc 4.x versions, this appears to still be needed with gcc 4.8.4.
Bump PKGREVISION for ffmpeg1 and ffplay1 (which uses ffmpeg1 patches)
* avcodec/svq1dec: zero terminate embedded message before printing
* avcodec/utils: Align dimensions by at least their chroma sub-sampling factors.
* avcodec/dnxhddec: treat pix_fmt like width/height
* avcodec/dxa: check dimensions
* avcodec/dirac_arith: fix integer overflow
* avcodec/diracdec: Tighter checks on CODEBLOCKS_X/Y
* avcodec/diracdec: Use 64bit in calculation of codeblock coordinates
* postproc: fix qp count
* postproc/postprocess: fix quant store for fq mode
* avcodec/h264_slice: Clear table pointers to avoid stale pointers
* swresample/swresample: fix sample drop loop end condition
* avcodec/h264: Check mode before considering mixed mode intra prediction
* avformat/mpegts: Check desc_len / get8() return code
* avcodec/smc: fix off by 1 error
* avcodec/qpeg: fix off by 1 error in MV bounds check
* avcodec/gifdec: factorize interleave end handling out
* avcodec/cinepak: fix integer underflow
* avcodec/pngdec: Calculate MPNG bytewidth more defensively
* avcodec/pngdec: Check bits per pixel before setting monoblack pixel format
* avcodec/tiff: more completely check bpp/bppcount
* avcodec/mmvideo: Bounds check 2nd line of HHV Intra blocks
* avcodec/utils: Add case for jv to avcodec_align_dimensions2()
* more...
FFmpeg is a complete, cross-platform solution to record, convert
and stream audio and video. It includes libavcodec - the leading
audio/video codec library.
This package contains major version 1.