[FFmpeg-cvslog] [ffmpeg-web] branch master updated. ae52c3d web: security update for 0.10
gitolite
ffmpeg-cvslog at ffmpeg.org
Fri Jan 27 00:26:53 CET 2012
The branch, master has been updated
via ae52c3d1cd8751b977f002a3e0da4d4dd2d46672 (commit)
via 30895438ec1c20e4003cdae20e06e185477428d5 (commit)
from ea3320c4ce9b4b0f3a8fa442c29b53d0f5149821 (commit)
- Log -----------------------------------------------------------------
commit ae52c3d1cd8751b977f002a3e0da4d4dd2d46672
Author: Michael Niedermayer <michaelni at gmx.at>
AuthorDate: Fri Jan 27 00:20:00 2012 +0100
Commit: Michael Niedermayer <michaelni at gmx.at>
CommitDate: Fri Jan 27 00:22:28 2012 +0100
web: security update for 0.10
diff --git a/src/security b/src/security
index b302a04..0e716b7 100644
--- a/src/security
+++ b/src/security
@@ -1,5 +1,15 @@
<h1>FFmpeg Security</h1>
+<h2>0.10</h2>
+<h3>FFmpeg 0.10</h3>
+<p>Fixes CVE-2011-3929, CVE-2011-3934, CVE-2011-3935, CVE-2011-3936,
+ CVE-2011-3937, CVE-2011-3940, CVE-2011-3941, CVE-2011-3944,
+ CVE-2011-3945, CVE-2011-3946, CVE-2011-3947, CVE-2011-3949,
+ CVE-2011-3950, CVE-2011-3951, CVE-2011-3952
+and several others that do not have a CVE number.
+Many of these issues can be exploited when a remote file is
+played back and some are probable arbitrary code execution vulnerabilities</p>
+
<h2>0.9</h2>
<h3>FFmpeg 0.9.1</h3>
<p>Fixes CVE-2011-3893 and CVE-2011-3895, and about 70 more security issues that
commit 30895438ec1c20e4003cdae20e06e185477428d5
Author: Michael Niedermayer <michaelni at gmx.at>
AuthorDate: Fri Jan 27 00:07:42 2012 +0100
Commit: Michael Niedermayer <michaelni at gmx.at>
CommitDate: Fri Jan 27 00:07:42 2012 +0100
web: add 0.10 to download
diff --git a/src/download b/src/download
index 8429d07..ee9ae73 100644
--- a/src/download
+++ b/src/download
@@ -200,6 +200,24 @@ selected changes from the development branch, which therefore receives much more
and much faster bug fixes such as additional features and security patches.
</p>
+<a name="release_0.10"></a><h2>
+FFmpeg 0.10 "Freedom"</h2>
+
+<p>
+0.10 was released on 2012-01-26. It is the latest stable FFmpeg release
+from the 0.10 release branch, which was cut from master on 2012-01-26.
+Amongst lots of other changes, it includes all changes from
+ffmpeg-mt, libav master of 2012-01-26, libav 0.8 as of 2012-01-26.
+</p>
+
+<p>
+<a href="releases/ffmpeg-0.10.tar.bz2">Download bzip2 tarball</a>
+<a href="releases/ffmpeg-0.10.tar.bz2.asc">PGP signature</a><br />
+<a href="releases/ffmpeg-0.10.tar.gz">Download gzip tarball</a>
+<a href="releases/ffmpeg-0.10.tar.gz.asc">PGP signature</a><br />
+<a href="http://git.videolan.org/?p=ffmpeg.git;a=shortlog;h=n0.10">Changelog</a><br />
+</p>
+
<a name="release_0.9"></a><h2>
FFmpeg 0.9.1 "Harmony"</h2>
-----------------------------------------------------------------------
Summary of changes:
src/download | 18 ++++++++++++++++++
src/security | 10 ++++++++++
2 files changed, 28 insertions(+), 0 deletions(-)
hooks/post-receive
--
More information about the ffmpeg-cvslog
mailing list