mpg123 (1.22.4-1ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: Memory overread - debian/patches/CVE-2016-1000247.patch: fix DoS with crafted ID3v2 tags. - CVE-2016-1000247 * SECURITY UPDATE: Memory overread - debian/patches/CVE-2017-10683.patch: fix in id3.c - CVE-2017-10683 -- Eduardo Barretto Thu, 06 Sep 2018 12:23:27 -0300 mpg123 (1.22.4-1) unstable; urgency=medium * New upstream release. - Fix regression introduced with a bugfix in 1.14.1 to make free format streams work again. -- Miguel A. Colón Vélez Fri, 18 Sep 2015 03:42:40 -0400 mpg123 (1.22.3-1) unstable; urgency=medium * New upstream release. - Fix UTF-16 surrogate detection because that used to falsely detect characters above 0xDFFF as surrogates. (Closes: 786718) * Update the Suggests so that they can be satisfied in all architectures. * Introduce a wrapper for the pulse plugin. * Simplify the rules file by removing the dh_shlibdeps and dh_makeshlibs overrides. -- Miguel A. Colón Vélez Thu, 06 Aug 2015 19:13:48 -0400 mpg123 (1.22.2-1) unstable; urgency=medium * New upstream release. * Check if DEB_HOST_ARCH_CPU is i386 instead of i486. (Closes: 751800) - In i386/hurd-i386/kfreebsd-i386 don't default to only building the "broken" decoder. * Override lintian error libmpg123-0: shlib-with-non-pic-code in i386. - Previous fix reintroduces all decoders and skips the "bad" one. The faster decoders use optimizations with non-pic code. * Update the watch file to verify the cryptographic signatures. * Bump Standards-Version to 3.9.6 (no changes needed). -- Miguel A. Colón Vélez Thu, 02 Jul 2015 23:32:31 -0400 mpg123 (1.20.1-2) unstable; urgency=medium * Team upload. [ Alessio Treglia ] * Update symbols file to prevent FTBFS on arm64. Thanks to Will Newton for pointing this out. (Closes: #758227) [ Sebastian Ramacher ] * debian/control: Remove ${shlibs:Depends} from libmpg123-dev's Depends. -- Sebastian Ramacher Sun, 31 Aug 2014 11:51:27 +0200 mpg123 (1.20.1-1) unstable; urgency=medium * New upstream release. * Remove myself from the Uploaders list. -- Alessio Treglia Wed, 06 Aug 2014 10:36:45 +0100 mpg123 (1.20.0-1) unstable; urgency=low * New upstream release. * Fix FTBFS on ppc64el. Thanks to Fernando Seiti Furusato for the patch. (Closes: #751136) * debian/copyright: - Update copyright holders information. - copyright-1 format compliance fixes. -- Alessio Treglia Mon, 07 Jul 2014 15:55:17 +0100 mpg123 (1.18.0-1) unstable; urgency=low * New upstream release, Closes: #737243 - libmpg123 version 39 - Big version increase for clear distinction regarding the 1.14.x regression fixes in libmpg123. - Regression fix: Ensure decoder reinitialization on combination of seek and resync (buffer overflow bug 201, introduced in 1.14.1). - Regression fix: Make parsing really end on reaching of junk limit (introduced in 1.14.4). - Add check for bad bit allocation value in layer I decoder (removes audible glitch in bug 201 test file). - Avoid wrong error message about Frankenstein streams when gapless decoding disabled. - Be verbose about big header changes (Frankenstein streams). Note that changes in samples per frame will confuse the seeking code, but decoding can get through. - Actually use the full routine to close tracks. Avoids socket leak when playing multiple HTTP streams from a playlist (bug 203). - Send correct host header when connecting through HTTP proxy (bug 202, figured out by Rajeev V. Pillai). - The console application now informs about changed major stream properties (prints out another header line). - mpg123-id3dump --no-scan; for speedup - hide -C parameter from mpg123 --help when it is not supported - added tinyalsa Output (by Jarno Lehtinen) - build system tweaking - some care for fixing Cygwin builds * Update symbol table to work with mips64/mips64el. Thanks to YunQiang Su for the patch. (Closes: #729047) * Update symbol table to work with x32. * Bump Standards-Version. - Remove mp3-decoder from the Provides list. [ Riku Voipio ] * switch arm to use generic_fpu, Closes: #738981, LP: #1072696 -- Miguel A. Colón Vélez Sat, 15 Feb 2014 13:42:35 +0000 mpg123 (1.16.0-1) unstable; urgency=low * New upstream release: - Taihei strikes again: + New Huffman decoding scheme (configurable, on by default) brings nice boost to mpg123 to make it the fastest decoder on modern CPUs again. + new AVX decoder - assembly-optimized DCT36 for SSE and AVX - added configs for vintage 3DNow(ext) CPUs (AMD K6) utilizing assembly DCT36 - added configs for vintage SSE CPUs (Pentium M), utilizing C DCT36 - added FORMAT command to generic control - added support for ID3v2 APIC frames - added mpg123-id3dump as official companion to extract meta data (including writing of album art from APIC to files) - added mpg123-strip as official companion to strip dirt out of MPEG streams (including meta data) - not deleting ID3 data right after printing in generic control - module loader a bit more flexible with relative MPG123_MODDIR - Fix chopped-off playback with pulseaudio output: draining the output now on closing. - SDL output fixup, a) not chopping off end and b) non-fatal underrun - added support for screen and iris-ansi terminals with --title - fixes/enhancements for sgi audio output - libmpg123: proper largefile aliases for proper systems (FreeBSD with one one-and-only off_t). This enables client software that insists on defining pointless _FILE_OFFSET_BITS. (Closes: #720440) - wrapper script src/mpg123-with-modules to ease the pain of running mpg123 with modules without installation (setting MPG123_MODDIR) - removed ALSA 0.5 code (unused for longtime, last GPL-only bit) * Drop kfreebsd LFS patch, applied upstream. * Bump Standards. -- Alessio Treglia Mon, 07 Oct 2013 11:25:27 +0100 mpg123 (1.15.3-2) unstable; urgency=low * Provide 64 bit wrapper functions on kfreebsd, Closes: #720440 * Add myself to uploaders -- Reinhard Tartler Sat, 31 Aug 2013 15:26:50 +0200 # For older changelog entries, run 'apt-get changelog libmpg123-0'