libquicktime (2:1.2.4-7+deb8u1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS caused by infinite loop, heap-based buffer
    over-read/write, and null ptr dereference
    - debian/patches/CVE-2017-9122-9218.patch: Add some sanity checks and
      adjust integer types to avoid memory handling errors.
    - CVE-2017-9122
    - CVE-2017-9123
    - CVE-2017-9124
    - CVE-2017-9125
    - CVE-2017-9126
    - CVE-2017-9127
    - CVE-2017-9128

 -- Mike Salvatore <mike.salvatore@canonical.com>  Wed, 23 Sep 2020 09:02:05 -0400

libquicktime (2:1.2.4-7+deb8u1build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

 -- Tyler Hicks <tyhicks@canonical.com>  Mon, 13 Mar 2017 14:52:14 +0000

libquicktime (2:1.2.4-7+deb8u1) jessie-security; urgency=medium

  * Team Upload
  * Fix integer overflow in the quicktime_read_pascal function (CVE-2016-2399)
    (Closes: #855099)

 -- Balint Reczey <balint@balintreczey.hu>  Tue, 28 Feb 2017 00:00:44 +0100

libquicktime (2:1.2.4-7) unstable; urgency=medium

  * Team upload.
  * Build-depend on libjpeg-dev; conversely drop build-dep on libjpeg8-dev.
    Thanks to Ondřej Surý for the nice reminder. (Closes: #763481)

 -- Alessio Treglia <alessio@debian.org>  Tue, 30 Sep 2014 15:00:59 +0100

libquicktime (2:1.2.4-6) unstable; urgency=medium

  * Team upload.
  * debian/control:
    - Bump Standards-Version.
    - Use canonical Vcs-* URIs.

 -- Sebastian Ramacher <sramacher@debian.org>  Tue, 13 May 2014 20:55:38 +0200

libquicktime (2:1.2.4-5) experimental; urgency=low

  * build against libav10 (Closes: #739325)

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 16 Mar 2014 13:13:12 -0400

libquicktime (2:1.2.4-4) unstable; urgency=low

  * remove Sam from the Uploaders field on his own request
  * disable cpu autodetection (Closes: #707305)
  * Bump standards version (no changes needed)

 -- Reinhard Tartler <siretart@tauware.de>  Wed, 12 Jun 2013 19:02:27 +0200

libquicktime (2:1.2.4-3) unstable; urgency=low

  * Team upload.
  * debian/patches/11-path_max.patch (Closes: #670338):
    - Avoid the use of PATH_MAX to allow building quicktime on hurd.
    - utils/rechunk.c: Don't use getline() unconditionally as it
      needs GNU extensions.

 -- Alessio Treglia <alessio@debian.org>  Mon, 21 May 2012 19:40:32 +0200

libquicktime (2:1.2.4-2) unstable; urgency=low

  * Remove translations from libquicktime2, they are not that useful.
    (Closes: #670027)

 -- Alessio Treglia <alessio@debian.org>  Mon, 23 Apr 2012 01:55:26 +0200

libquicktime (2:1.2.4-1) unstable; urgency=low

  * Team upload.
  * New upstream release:
    - Upgrade for newer ffmpeg APIs
    - Fix the JPEG encoder for image sizes, which are no multiples of 16
    - Export edit lists in the public API
    - Support for 10 bit DNxHD streams
  * Drop 30-libav-0.7.patch, fixed upstream.
  * Refresh 02-install-in-libquicktime2.patch
  * Convert to MultiArch.
  * Refresh symbols file.
  * Change build-dep from libpng12-dev to libpng-dev. (Closes: #662409)
  * Demote libquicktime-doc from Recommends to the Suggests field of
    libquicktime-dev.
  * Bump Standards.

 -- Alessio Treglia <alessio@debian.org>  Tue, 10 Apr 2012 11:07:51 +0200

# For older changelog entries, run 'apt-get changelog libquicktime2'
