Change log : flac package : Ubuntu

1.4.3+ds-2.1ubuntu2

Published in oracular-release on 2024-04-29

Published in noble-release on 2024-04-04

Deleted in noble-proposed (Reason: Moved to noble)

flac (1.4.3+ds-2.1ubuntu2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 00:58:35 +0000

Available diffs

diff from 1.4.3+ds-2.1ubuntu1 to 1.4.3+ds-2.1ubuntu2 (330 bytes)

1.4.3+ds-2.1ubuntu1

Superseded in noble-release on 2024-04-04

Deleted in noble-proposed on 2024-04-05 (Reason: Moved to noble)

flac (1.4.3+ds-2.1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable, remaining changes:
    - Don't Build-Depend on pandoc on i386

Available diffs

diff from 1.4.3+ds-2ubuntu1 to 1.4.3+ds-2.1ubuntu1 (4.3 KiB)
diff from 1.4.3+ds-2.1 (in Debian) to 1.4.3+ds-2.1ubuntu1 (831 bytes)

1.4.3+ds-2.1

Superseded in noble-proposed on 2024-03-04

flac (1.4.3+ds-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063114

 -- Benjamin Drung <email address hidden>  Fri, 01 Mar 2024 11:59:59 +0000

1.3.3-1ubuntu0.2

Published in focal-updates on 2023-09-12

Published in focal-security on 2023-09-12

flac (1.3.3-1ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Buffer Overflow in function bitwriter_grow_
    - debian/patches/CVE-2020-22219.patch: add and use _nofree variants of
      safe_realloc functions in include/share/alloc.h, src/flac/encode.c,
      src/flac/foreign_metadata.c, src/libFLAC/bitwriter.c,
      src/libFLAC/metadata_object.c, src/plugin_common/tags.c,
      src/share/utf8/iconvert.c.
    - CVE-2020-22219

 -- Marc Deslauriers <email address hidden>  Mon, 11 Sep 2023 14:07:03 -0400

Available diffs

diff from 1.3.3-1ubuntu0.1 to 1.3.3-1ubuntu0.2 (2.5 KiB)

1.3.3-2ubuntu0.2

Published in jammy-updates on 2023-09-12

Published in jammy-security on 2023-09-12

flac (1.3.3-2ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Buffer Overflow in function bitwriter_grow_
    - debian/patches/CVE-2020-22219.patch: add and use _nofree variants of
      safe_realloc functions in include/share/alloc.h, src/flac/encode.c,
      src/flac/foreign_metadata.c, src/libFLAC/bitwriter.c,
      src/libFLAC/metadata_object.c, src/plugin_common/tags.c,
      src/share/utf8/iconvert.c.
    - CVE-2020-22219

 -- Marc Deslauriers <email address hidden>  Mon, 11 Sep 2023 14:04:48 -0400

Available diffs

diff from 1.3.3-2 (in Debian) to 1.3.3-2ubuntu0.2 (3.5 KiB)
diff from 1.3.3-2ubuntu0.1 to 1.3.3-2ubuntu0.2 (2.5 KiB)

1.4.3+ds-2ubuntu1

Deleted in noble-updates (Reason: superseded by release)

Superseded in noble-release on 2024-03-28

Published in mantic-release on 2023-07-08

Deleted in mantic-proposed (Reason: Moved to mantic)

flac (1.4.3+ds-2ubuntu1) mantic; urgency=medium

  * Sync with Debian. Remaining change:
    - Don't Build-Depend on pandoc on i386

 -- Jeremy Bícha <email address hidden>  Mon, 03 Jul 2023 21:48:23 -0400

Available diffs

diff from 1.4.2+ds-2ubuntu1 to 1.4.3+ds-2ubuntu1 (242.3 KiB)
diff from 1.4.3+ds-2 (in Debian) to 1.4.3+ds-2ubuntu1 (702 bytes)

1.4.3+ds-2

Superseded in mantic-proposed on 2023-07-04

flac (1.4.3+ds-2) unstable; urgency=medium

  [ Adrian Bunk ]
  * Don't use pandoc on ports architectures that don't have it.

 -- Fabian Greffrath <email address hidden>  Mon, 03 Jul 2023 08:43:49 +0200

1.4.2+ds-2ubuntu1

Superseded in mantic-release on 2023-07-08

Published in lunar-release on 2022-11-28

Deleted in lunar-proposed (Reason: Moved to lunar)

flac (1.4.2+ds-2ubuntu1) lunar; urgency=medium

  * Do not build and install manpages on i386. Build dep pandoc is
    not available in Ubuntu for i386. (LP: #1997533)
    - debian/control:
      + Exclude pandoc build dep on i386.
      + Add dh-exec build dep.
    - debian/flac.install
      + Make executable and add '#!/usr/bin/dh-exec'.
      + Exclude installing manpages on i386.

 -- Rik Mills <email address hidden>  Thu, 24 Nov 2022 18:56:12 +0000

Available diffs

diff from 1.3.4-2 (in Debian) to 1.4.2+ds-2ubuntu1 (1.2 MiB)
diff from 1.4.2+ds-2 (in Debian) to 1.4.2+ds-2ubuntu1 (829 bytes)

1.3.3-2ubuntu0.1

Superseded in jammy-updates on 2023-09-12

Superseded in jammy-security on 2023-09-12

flac (1.3.3-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: out of bounds write in stream_encoder.c
    - debian/patches/CVE-2021-0561.patch: exit at EOS in verify mode
      (libFLAC).
    - CVE-2021-0561

 -- Camila Camargo de Matos <email address hidden>  Thu, 17 Nov 2022 12:54:19 -0300

Available diffs

diff from 1.3.3-2build2 (in ~ci-train-ppa-service/ubuntu/4810-deletedppa) to 1.3.3-2ubuntu0.1 (1.4 KiB)

1.3.3-1ubuntu0.1

Superseded in focal-updates on 2023-09-12

Superseded in focal-security on 2023-09-12

flac (1.3.3-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: out of bounds read in bitreader.c
    - debian/patches/CVE-2020-0499.patch: fix out-of-bounds read
      (libFLAC/bitreader.c).
    - CVE-2020-0499
  * SECURITY UPDATE: out of bounds write in stream_encoder.c
    - debian/patches/CVE-2021-0561.patch: exit at EOS in verify mode
      (libFLAC).
    - CVE-2021-0561

 -- Camila Camargo de Matos <email address hidden>  Thu, 17 Nov 2022 12:53:39 -0300

Available diffs

diff from 1.3.3-1build1 (in Ubuntu) to 1.3.3-1ubuntu0.1 (1.9 KiB)

1.3.2-1ubuntu0.1

Published in bionic-updates on 2022-11-21

Published in bionic-security on 2022-11-21

flac (1.3.2-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: memory leak in stream_decoder.c
    - debian/patches/CVE-2017-6888.patch: fix a memory leak
      (stream_decoder.c).
    - CVE-2017-6888
  * SECURITY UPDATE: out of bounds read in bitreader.c
    - debian/patches/CVE-2020-0499.patch: fix out-of-bounds read
      (libFLAC/bitreader.c).
    - CVE-2020-0499
  * SECURITY UPDATE: out of bounds write in stream_encoder.c
    - debian/patches/CVE-2021-0561.patch: exit at EOS in verify mode
      (libFLAC).
    - CVE-2021-0561

 -- Camila Camargo de Matos <email address hidden>  Thu, 17 Nov 2022 12:53:03 -0300

Available diffs

diff from 1.3.2-1 (in Debian) to 1.3.2-1ubuntu0.1 (2.2 KiB)

1.4.2+ds-2

Superseded in lunar-proposed on 2022-11-27

flac (1.4.2+ds-2) unstable; urgency=medium

  [ Fabian Greffrath ]
  * Remove doc/FLAC.tag and prebuilt manpages as well.

  [ Dennis Braun ]
  * d/copyright: Re-add a line which was removed accidentally

  [ Fabian Greffrath ]
  * Backport --force-legacy-wave-format command line option from
    upstream to force the decoder to output to WAVE_FORMAT_PCM when
    WAVE_FORMAT_EXTENSIBLE would be appropriate (Closes: #941132).

 -- Fabian Greffrath <email address hidden>  Fri, 11 Nov 2022 09:10:23 +0100

Available diffs

diff from 1.4.2+ds-1 to 1.4.2+ds-2 (2.7 KiB)

1.4.2+ds-1

Superseded in lunar-proposed on 2022-11-11

flac (1.4.2+ds-1) unstable; urgency=medium

  [ Sebastian Ramacher ]
  * Remove incorrect Breaks+Replaces

  [ Dennis Braun ]
  * New upstream version 1.4.2
  * Drop privacy breach patch, applied by upstream
  * d/copyright: Remove non-existing entries

  [ Fabian Greffrath ]
  * Rebuild upstream tarball without documentation.
  * Remove debian/source/lintian-overrides file.

 -- Fabian Greffrath <email address hidden>  Wed, 26 Oct 2022 07:31:09 +0200

1.3.4-2

Superseded in lunar-release on 2022-11-28

Obsolete in kinetic-release on 2023-11-13

Deleted in kinetic-proposed (Reason: Moved to kinetic)

flac (1.3.4-2) unstable; urgency=medium

  [ Philip Rinn ]
  * Add upstream patch to fix seeking bug (closes: #1008424)

 -- Fabian Greffrath <email address hidden>  Thu, 09 Jun 2022 08:40:28 +0200

Available diffs

diff from 1.3.4-1 to 1.3.4-2 (1.2 KiB)

1.3.3-2build2

Superseded in kinetic-release on 2022-04-30

Published in jammy-release on 2022-03-28

Deleted in jammy-proposed (Reason: Moved to jammy)

flac (1.3.3-2build2) jammy; urgency=medium

  * No-change rebuild for ppc64el baseline bump.

 -- Łukasz 'sil2100' Zemczak <email address hidden>  Wed, 23 Mar 2022 14:52:21 +0100

Available diffs

diff from 1.3.3-2build1 (in Ubuntu) to 1.3.3-2build2 (341 bytes)

1.3.4-1

Superseded in kinetic-release on 2022-06-09

Deleted in kinetic-proposed on 2022-06-10 (Reason: Moved to kinetic)

flac (1.3.4-1) unstable; urgency=medium

  * New upstream version 1.3.4
    + Closes: #1006339, CVE-2021-0561.
  * Remove patch backported from upstream.
  * Bump debhelper-compat to 13.
  * Add "Rules-Requires-Root: no".
  * Bump Standards-Version to 4.6.0.
  * Bump watch file version to 4.
  * Add "usr/lib/*/*.la" to debian/not-installed.
  * Adapt doc-base paths to actual file locations.

 -- Fabian Greffrath <email address hidden>  Sat, 05 Mar 2022 13:07:41 +0100

Available diffs

diff from 1.3.3-2build2 (in ~ci-train-ppa-service/ubuntu/4810-deletedppa) to 1.3.4-1 (758.8 KiB)

1.3.3-2build1

Superseded in jammy-release on 2022-03-28

Deleted in jammy-proposed on 2022-03-29 (Reason: Moved to jammy)

Deleted in impish-proposed on 2022-03-29 (Reason: Moved ot jammy)

flac (1.3.3-2build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:11:32 +0200

Available diffs

diff from 1.3.3-2 (in Debian) to 1.3.3-2build1 (318 bytes)

1.3.3-2

Superseded in jammy-release on 2021-10-17

Obsolete in impish-release on 2022-07-23

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed (Reason: moved to Release)

flac (1.3.3-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Use secure URI in Homepage field.

  [ Fabian Greffrath ]
  * libFLAC/bitreader.c: Fix out-of-bounds read (CVE-2020-0499),
    Closes: #977764.

 -- Fabian Greffrath <email address hidden>  Mon, 21 Dec 2020 16:39:34 +0100

Available diffs

diff from 1.3.3-1build1 (in Ubuntu) to 1.3.3-2 (1.2 KiB)

1.3.3-1build1

Superseded in hirsute-release on 2020-12-22

Obsolete in groovy-release on 2021-12-22

Published in focal-release on 2020-03-21

Deleted in focal-proposed (Reason: moved to Release)

flac (1.3.3-1build1) focal; urgency=medium

  * No-change rebuild for libgcc-s1 package name change.

 -- Matthias Klose <email address hidden>  Sat, 21 Mar 2020 13:27:11 +0100

Available diffs

diff from 1.3.3-1 (in Debian) to 1.3.3-1build1 (316 bytes)

1.3.3-1

Superseded in focal-release on 2020-03-21

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

flac (1.3.3-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat

  [ Fabian Greffrath ]
  * New upstream version 1.3.3
  * Remove patches applied upstream.
  * Bump debhelper-compat to 12.
  * Bump Standards-Version to 4.4.0.
  * Use secure URI in debian/watch.
  * Update symbols files with new symbols and Build-Depends-Package lines.

 -- Fabian Greffrath <email address hidden>  Fri, 09 Aug 2019 12:02:03 +0200

Available diffs

diff from 1.3.2-3 to 1.3.3-1 (796.2 KiB)

1.3.2-3

Superseded in eoan-release on 2019-08-09

Obsolete in disco-release on 2020-07-14

Obsolete in cosmic-release on 2020-07-13

Deleted in cosmic-proposed on 2020-07-14 (Reason: moved to release)

flac (1.3.2-3) unstable; urgency=medium

  * Use my debian account in Uploaders field and
    update Debian packaging copyright information.
  * Bump debhelper compat to 11.
  * Add patch by Dafydd Harries to make the build reproducible
    (Closes: #846893).
  * Bump Standards-Version to 4.1.4.
  * Drop versioned Build-Depends on g++.
  * Mark libflac-doc as Multi-Arch: foreign.
  * Remove unused debian/libflac-doc.lintian-overrides.
  * Move doxygen to Build-Depends-Indep and adjust debian/rules accordingly
    (Closes: #706805).

 -- Fabian Greffrath <email address hidden>  Wed, 16 May 2018 21:35:01 +0200

Available diffs

diff from 1.3.2-2 to 1.3.2-3 (1.9 KiB)

1.3.2-2

Superseded in cosmic-release on 2018-05-17

Deleted in cosmic-proposed on 2018-05-19 (Reason: moved to release)

flac (1.3.2-2) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/copyright: Use https protocol in Format field
  * d/control: Set Vcs-* to salsa.debian.org
  * d/changelog: Remove trailing whitespaces

  [ Felipe Sateler ]
  * Change maintainer address to <email address hidden>

  [ Fabian Greffrath ]
  * Apply two commits from upstream's GIT repo to fix memory leaks
    (Closes: #897015, CVE-2017-6888).

 -- Fabian Greffrath <email address hidden>  Tue, 01 May 2018 20:56:47 +0200

Available diffs

diff from 1.3.2-1 to 1.3.2-2 (2.6 KiB)

1.3.2-1

Superseded in cosmic-release on 2018-05-05

Published in bionic-release on 2017-10-24

Obsolete in artful-release on 2020-07-10

Obsolete in zesty-release on 2018-06-22

Deleted in zesty-proposed (Reason: moved to release)

flac (1.3.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * debian/patches:
    - Refresh patches.
    - Remove patches integrated upstream.
  * debian/copyright: Update copyright years.
  * debian/control:
    - Bump Standards-Version.
    - Update Vcs-*.
  * debian/{rules,control,compat}: Bump dh compat to 10.
  * debian/libflac-doc.lintian-overrides: Override incorrect lintian warning
    about jquery.js.

 -- Sebastian Ramacher <email address hidden>  Tue, 03 Jan 2017 20:36:10 +0100

Available diffs

diff from 1.3.1-4 to 1.3.2-1 (861.3 KiB)

1.3.1-4

Superseded in zesty-release on 2017-01-04

Obsolete in yakkety-release on 2018-01-23

Published in xenial-release on 2015-10-22

Obsolete in wily-release on 2018-01-22

Deleted in wily-proposed (Reason: moved to release)

flac (1.3.1-4) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Sebastian Ramacher <email address hidden>  Wed, 05 Aug 2015 02:01:47 +0200

Available diffs

diff from 1.3.1-1ubuntu1 (in Ubuntu) to 1.3.1-4 (6.0 KiB)
diff from 1.3.1-3 to 1.3.1-4 (282 bytes)

1.3.1-3

Superseded in wily-proposed on 2015-08-05

flac (1.3.1-3) experimental; urgency=medium

  * Team upload.
  * Rename libflac++6 to libflac++6v5 for GCC 5 transition.

 -- Sebastian Ramacher <email address hidden>  Mon, 03 Aug 2015 21:32:22 +0200

1.3.1-1ubuntu1

Superseded in wily-release on 2015-08-16

Obsolete in vivid-release on 2018-01-18

Deleted in vivid-proposed on 2018-01-19 (Reason: moved to release)

flac (1.3.1-1ubuntu1) vivid; urgency=medium

  * Fix symbols file for 32bit architectures. LP: #1409483.
 -- Matthias Klose <email address hidden>   Wed, 04 Mar 2015 15:28:13 +0100

Available diffs

diff from 1.3.0-3 (in Debian) to 1.3.1-1ubuntu1 (1000.5 KiB)
diff from 1.3.1-1 (in Debian) to 1.3.1-1ubuntu1 (1.9 KiB)

1.3.1-1

Superseded in vivid-proposed on 2015-03-04

flac (1.3.1-1) experimental; urgency=medium


  [ Jackson Doak ]
  * Disable silent rules
  * Enable hardening
  * Add symbols files

  [ Fabian Greffrath ]
  * Adapt debian/watch file to reflect actual upstream versioning scheme.
  * Imported Upstream version 1.3.1
    + Fixes CVE-2014-8962 and CVE-2014-9028 (Closes: #770918).
    + Support for 3DNOW! optimizations has been removed.
    + Localized RU documentation has been removed.
  * Drop patches applied upstream.
  * Backport patch from upstream GIT to fix another input validation bug.
  * Fix "privacy-breach-logo" and "privacy-breach-w3c-valid-html"
    lintian errors.
  * In debian/rules, remove the "override_dh_makeshlibs" rule
    for the symbols files to have effect.
  * Update, improve and convert debian/copyright to machine-readable format.
  * Bump Standards-Version to 3.9.6.

 -- Fabian Greffrath <email address hidden>  Mon, 01 Dec 2014 18:32:57 +0100

Available diffs

diff from 1.3.0-3 to 1.3.1-1 (1000.2 KiB)

1.3.0-3

Superseded in vivid-release on 2015-03-04

Deleted in vivid-proposed on 2015-03-05 (Reason: moved to release)

flac (1.3.0-3) unstable; urgency=high


  * Fixes for CVE-2014-8962 and CVE-2014-9028:
    + Backport three patches from upstream GIT repository:
      - CVE-2014-8962.patch: Fix a buffer read overflow.
      - CVE-2014-9028.patch: Avoid a heap overflow.
      - CVE-2014-9028-2.patch: Avoid a heap overflow. Closely related to
        the former fix, but strictly speaking not the same vulnerability.
    + Closes: #770918.
    + Thanks Erik de Castro Lopo for the bug report and the upstream fixes!

 -- Fabian Greffrath <email address hidden>  Thu, 27 Nov 2014 16:52:51 +0100

Available diffs

diff from 1.3.0-2ubuntu1 (in Ubuntu) to 1.3.0-3 (2.3 KiB)

1.3.0-2ubuntu1

Superseded in vivid-release on 2014-12-03

Deleted in vivid-proposed on 2014-12-04 (Reason: moved to release)

flac (1.3.0-2ubuntu1) vivid; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-8962.patch: validate id in
      src/libFLAC/stream_decoder.c.
    - CVE-2014-8962
  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
      in src/libFLAC/stream_decoder.c.
    - CVE-2014-9028
 -- Marc Deslauriers <email address hidden>   Thu, 27 Nov 2014 12:21:50 -0500

Available diffs

diff from 1.3.0-2 (in Debian) to 1.3.0-2ubuntu1 (1.7 KiB)

1.3.0-2ubuntu0.14.04.1

Published in trusty-updates on 2014-11-27

Published in trusty-security on 2014-11-27

flac (1.3.0-2ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-8962.patch: validate id in
      src/libFLAC/stream_decoder.c.
    - CVE-2014-8962
  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
      in src/libFLAC/stream_decoder.c.
    - CVE-2014-9028
 -- Marc Deslauriers <email address hidden>   Thu, 27 Nov 2014 12:26:23 -0500

Available diffs

diff from 1.3.0-2 (in Debian) to 1.3.0-2ubuntu0.14.04.1 (1.8 KiB)

1.2.1-6ubuntu0.1

Published in precise-updates on 2014-11-27

Published in precise-security on 2014-11-27

flac (1.2.1-6ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-8962.patch: validate id in
      src/libFLAC/stream_decoder.c.
    - CVE-2014-8962
  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
      in src/libFLAC/stream_decoder.c.
    - CVE-2014-9028
 -- Marc Deslauriers <email address hidden>   Thu, 27 Nov 2014 12:27:24 -0500

Available diffs

diff from 1.2.1-6 (in Debian) to 1.2.1-6ubuntu0.1 (1.6 KiB)

1.3.0-2ubuntu0.14.10.1

Obsolete in utopic-updates on 2016-11-03

Obsolete in utopic-security on 2016-11-03

flac (1.3.0-2ubuntu0.14.10.1) utopic-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-8962.patch: validate id in
      src/libFLAC/stream_decoder.c.
    - CVE-2014-8962
  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
      in src/libFLAC/stream_decoder.c.
    - CVE-2014-9028
 -- Marc Deslauriers <email address hidden>   Thu, 27 Nov 2014 12:25:36 -0500

Available diffs

diff from 1.3.0-2 (in Debian) to 1.3.0-2ubuntu0.14.10.1 (1.8 KiB)

1.2.1-2ubuntu0.1

Obsolete in lucid-updates on 2016-10-26

Obsolete in lucid-security on 2016-10-26

flac (1.2.1-2ubuntu0.1) lucid-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-8962.dpatch: validate id in
      src/libFLAC/stream_decoder.c.
    - CVE-2014-8962
  * SECURITY UPDATE: arbitrary code execution via crafted .flac file
    - debian/patches/CVE-2014-9028.dpatch: error out to avoid heap overflow
      in src/libFLAC/stream_decoder.c.
    - CVE-2014-9028
 -- Marc Deslauriers <email address hidden>   Thu, 27 Nov 2014 12:28:27 -0500

Available diffs

diff from 1.2.1-2build2 (in ~asac/ubuntu/armel1) to 1.2.1-2ubuntu0.1 (1.5 KiB)

1.3.0-2

Superseded in vivid-release on 2014-11-27

Obsolete in utopic-release on 2016-11-03

Published in trusty-release on 2013-10-21

Deleted in trusty-proposed (Reason: moved to release)

flac (1.3.0-2) unstable; urgency=low


  [ Reinhard Tartler ]
  * switch to xz compression
  * Bump standards version (no changes)

  [ Fabian Greffrath ]
  * Add -lflac to flac++'s pkg-config file (Closes: #713645);
    thanks Sebastian Ramacher.

 -- Fabian Greffrath <email address hidden>  Tue, 03 Sep 2013 21:38:39 +0200

Available diffs

diff from 1.3.0-1 to 1.3.0-2 (1.1 KiB)

1.3.0-1

Superseded in trusty-release on 2013-10-21

Obsolete in saucy-release on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)

flac (1.3.0-1) unstable; urgency=low


  * Imported Upstream version 1.3.0 (Closes: #527542, #705601).
  * Update debian/watch file, thanks Ulrich Klauer (Closes: #710062).
  * Revert "Remove manpages from master branch."
  * Imported Upstream version 1.3.0
  * Convert package to "3.0 (quilt)" source format.
  * Remove all patches, they have either been merged upstream or do not
    apply anymore (tested).
  * Explicitly enable static libraries.
  * Simplify debian/libflac-doc.install.
  * Bump shlibs for added symbols.
  * Remove needless Build-Depends: libid3-3.8.3-dev.
  * Update Homepage field.
  * Repair upstream manpage regeneration rule.
  * Bump Build-Depends: debhelper (>= 9).
  * Fix vcs-field-not-canonical.
  * Import two patches from upstream GIT:
    + Add missing config.h includes.
    + Fix local_strcat() to terminate string correctly.
  * Disable 3DNow! optimizations, enable SSE only on amd64, enable Altivec
    only on ppc64, disable ASM optimizations elsewhere.

 -- Fabian Greffrath <email address hidden>  Fri, 07 Jun 2013 10:24:30 +0200

Available diffs

diff from 1.2.1-6build1 (in Ubuntu) to 1.3.0-1 (1.5 MiB)

1.2.1-6build1

Superseded in saucy-release on 2013-06-12

Obsolete in raring-release on 2015-04-24

Obsolete in quantal-release on 2015-04-24

flac (1.2.1-6build1) quantal; urgency=low

  * Rebuild for new armel compiler default of ARMv5t.
 -- Colin Watson <email address hidden>   Tue, 02 Oct 2012 10:16:09 +0100

Available diffs

diff from 1.2.1-6 (in Debian) to 1.2.1-6build1 (318 bytes)

1.2.1-6

Superseded in quantal-release on 2012-10-02

Published in precise-release on 2011-10-18

flac (1.2.1-6) unstable; urgency=medium


  * Fix "format not a string literal and no format arguments
    [-Werror=format-security]" errors (Closes: #643377).

 -- Fabian Greffrath <email address hidden>  Wed, 05 Oct 2011 14:26:47 +0200

1.2.1-4ubuntu1

Superseded in precise-release on 2011-10-18

Obsolete in oneiric-release on 2015-04-24

flac (1.2.1-4ubuntu1) oneiric; urgency=low

  * Build for multiarch.  LP: #825342.
 -- Steve Langasek <email address hidden>   Fri, 12 Aug 2011 12:19:08 -0700

Available diffs

diff from 1.2.1-4 (in Debian) to 1.2.1-4ubuntu1 (1000 bytes)
diff from 1.2.1-4 to 1.2.1-4ubuntu1 (1000 bytes)

1.2.1-4

Superseded in oneiric-release on 2011-08-12

flac (1.2.1-4) unstable; urgency=low

  [ Fabian Greffrath ]
  * Convert patch tracking system from dpatch to quilt.
  * Convert package to use dh7 with quilt and autotools-dev sequence
    addons.
  * Clean up debian/control and debian/flac.install.
  * Remove unnecessary debian/fixrpath.
  * Skip test suite, it was also skipped before.
  * Bring back config.sub and config.guess from upstream branch.
  * Improve debian/copyright.
  * Remove special handling of CFLAGS for m68k.
  * debian/patches/12_ac_config_macro_dir.patch: New patch, fixes
    "undefined macro: AM_PATH_XMMS" and similar errors which cause
    autoreconf to fail.
  * Drop debian/patches/90_autoreconf.patch in favour of dh-autoreconf.
  * Convert patch tracking system from dpatch to quilt.
  * Convert package to use dh7 with quilt and autotools-dev sequence addons.
  * Clean up debian/control and debian/flac.install.
  * Remove unseless debian/fixrpath.
  * Prepare new changelog entry.
  * Skip test suite, it was also skipped before.
  * Bring back config.sub and config.guess from upstream branch.
  * Clarify dh_auto_test should be omitted.
  * Update debian/changelog.
  * Improve debian/copyright.
  * Update debian/changelog.
  * Remove special handling of CFLAGS for m68k.
  * debian/patches/12_ac_config_macro_dir.patch: New patch, fixes
    "undefined macro: AM_PATH_XMMS" and similar errors which cause
    autoreconf to fail.
  * Drop debian/patches/90_autoreconf.patch in favour of dh-autoreconf.
  * Update debian/changelog.
  * Remove 90_autoreconf.patch from debian/patches/series as well.

  [ Alessio Treglia ]
  * debian/control:
    - Bump Standards.
    - Fix team's name.
  * debian/patches/13_replaygain_c_locale.patch:
    - flac should not use locales when running with 'replaygain'
      option (Closes: #498050).
  * debian/patches/14_metadata_iterators_memleak.patch:
    - Fix memoy leak in metadata_iterators.c, 'node' is not freed;
      Patch taken from upstream's patchtracker.
  * Add .gitignore to skip quilt files.
  * Add gbp config file.
  * Get rid of unneeded *.la files (Closes: #633177).
 -- Alessio Treglia <email address hidden>   Sat, 09 Jul 2011 11:51:59 +0200

Available diffs

diff from 1.2.1-3 to 1.2.1-4 (563.1 KiB)

1.2.1-3

Superseded in oneiric-release on 2011-07-15

Obsolete in natty-release on 2013-06-04

Obsolete in maverick-release on 2013-03-05

flac (1.2.1-3) unstable; urgency=low

  * Add Joshua Kwan back to Uploaders, sorry!
  * Update my e-mail address.
  * Fix "libFLAC.m4 may set empty -L flag when configure is called
    without arguments" (Closes: #579025).
  * Consider *gnuspe which matches powerpc-unknown-linux-gnuspe where
    AltiVec is not available at all (Closes: #585518), thanks Sebastian
    Andrzej Siewior.
  * Mandatory autoreconf.
  * Add debian/source/format, keep at 1.0 for now.
  * Add debian/README.source.
  * Add Vcs-* and Homepage fields.
  * Bump Standards-Version to 3.8.4.
 -- Alessio Treglia <email address hidden>   Tue, 15 Jun 2010 14:37:46 +0200

Available diffs

diff from 1.2.1-2build2 (in ~asac/ubuntu/armel1) to 1.2.1-3 (553.9 KiB)

1.2.1-2build2

Superseded in maverick-release on 2010-08-10

Obsolete in lucid-release on 2016-10-26

flac (1.2.1-2build2) lucid; urgency=low

  * rebuild rest of main for armel armv7/thumb2 optimization;
    UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2
 -- Alexander Sack <email address hidden>   Fri, 05 Mar 2010 04:15:00 +0100

Available diffs

diff from 1.2.1-2build1 (in Ubuntu) to 1.2.1-2build2 (342 bytes)

1.2.1-2build1

Superseded in lucid-release on 2010-03-06

Obsolete in karmic-release on 2013-03-04

flac (1.2.1-2build1) karmic; urgency=low

  * No-change rebuild to drop reference to libogg.la

 -- Steve Langasek <email address hidden>   Tue, 18 Aug 2009 01:05:44 +0000

Available diffs

diff from 1.2.1-2 to 1.2.1-2build1 (305 bytes)

1.2.1-2

Superseded in karmic-release on 2009-08-18

flac (1.2.1-2) unstable; urgency=high

  * New maintainer (Closes: #539565).
  * Acknowledge NMUs (Closes: #456726, #455304, #525826, #525829).
  * Urgency high, because of fixed RC bugs.

  * Set Maintainer to Debian multimedia packages maintainers and added
    myself to Uploaders.
  * Wrapped and sorted Build-Depends.
  * Added ${misc:Depends} to all packages and wrapped Depends fields.
  * Bumped debhelper compat to 7.
  * Removed versioned dependency on g++ and libid3-3.8.3-dev, the
    required versions are already in oldstable.
  * Bumped Standards-Version to 3.8.2.
  * Removed Conflicts and Replaces against packages that aren't even in
    oldstable anymore.
  * Point to versioned license file (GPL-2).
  * Use dh_prep instead of dh_clean -k.
  * Update config.sub and config.guess in the configure rule and remove
    them in the clean target.
  * Fixed doc-base-uses-applications-section.
  * debian/patches/09_noexec-stack.dpatch: New patch to indicate that
    libFLAC.so doesn't need an executable stack (Closes: #467544),
    Thanks Russell Coker <email address hidden>.
  * Added shlibs information for libflac8 and libflac++6 (Closes:
    #481428, #508293).
  * Fixed binary-control-field-duplicates-source.
  * Added patch description to debian/patches/02_doc_path.dpatch.
  * Added patch description to debian/patches/08_gcc-4.3_fixes.dpatch.
  * Regenerate manpages at compile time: Add docbook-to-man to Build-
    Depends, change debian/patches/02_doc_path.dpatch to modify
    man/flac.sgml, stop touching man/flac.1 in debian/rules and remove
    the manpages in the clean target.

Available diffs

diff from 1.2.1-1.2 to 1.2.1-2 (18.6 KiB)

1.2.1-1.2

Superseded in karmic-release on 2009-08-10

Obsolete in jaunty-release on 2013-02-28

Obsolete in intrepid-release on 2013-02-20

flac (1.2.1-1.2) unstable; urgency=low

  * Non-maintainer upload.
  * Fix gcc-4.3 FTBFS, patch by KiBi (Closes: #455304)

Available diffs

diff from 1.2.1-1ubuntu2 to 1.2.1-1.2 (1.5 KiB)

1.2.1-1ubuntu2

Superseded in intrepid-release on 2008-06-22

Obsolete in hardy-release on 2015-04-24

flac (1.2.1-1ubuntu2) hardy; urgency=low

  * Fix build failure with g++-4.3.

 -- Matthias Klose <email address hidden>   Thu, 24 Jan 2008 17:15:17 +0000

1.2.1-1ubuntu1

Superseded in hardy-release on 2008-01-24

flac (1.2.1-1ubuntu1) hardy; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/control: xmms-dev dropped to allow xmms to move to universe,
      adjust maintainer field.

1.1.4-3ubuntu1.1

Obsolete in gutsy-updates on 2011-09-16

Obsolete in gutsy-security on 2011-09-16

flac (1.1.4-3ubuntu1.1) gutsy-security; urgency=low

  * SECURITY UPDATE: multiple integer overflows resulting in heap-based
    buffer overflows and potential remote code execution
  * debian/patches/08_SECURITY_CVE-2007-4619.dpatch: perform proper bounds
    checking, create safe memory allocation functions in alloc.h, and adjust
    source files to use these safe memory routines.
  * References
    CVE-2007-4619

 -- Jamie Strandboge <email address hidden>   Tue, 23 Oct 2007 21:00:18 +0000

1.1.2-5ubuntu2.1

Obsolete in feisty-updates on 2009-08-20

Obsolete in feisty-security on 2009-08-20

flac (1.1.2-5ubuntu2.1) feisty-security; urgency=low

  * SECURITY UPDATE: multiple integer overflows resulting in heap-based
    buffer overflows and potential remote code execution
  * debian/patches/08_SECURITY_CVE-2007-4619.dpatch: perform proper bounds
    checking, create safe memory allocation functions in alloc.h, and adjust
    source files to use these safe memory routines.
  * References
    CVE-2007-4619

 -- Jamie Strandboge <email address hidden>   Wed,  7 Nov 2007 14:27:01 -0500

1.1.2-5ubuntu1.1

Obsolete in edgy-updates on 2008-06-19

Obsolete in edgy-security on 2008-06-19

flac (1.1.2-5ubuntu1.1) edgy-security; urgency=low

  * SECURITY UPDATE: multiple integer overflows resulting in heap-based
    buffer overflows and potential remote code execution
  * debian/patches/08_SECURITY_CVE-2007-4619.dpatch: perform proper bounds
    checking, create safe memory allocation functions in alloc.h, and adjust
    source files to use these safe memory routines.
  * References
    CVE-2007-4619

 -- Jamie Strandboge <email address hidden>   Wed,  7 Nov 2007 16:16:10 -0500

1.1.2-3ubuntu1.1

Obsolete in dapper-updates on 2011-09-06

Obsolete in dapper-security on 2011-09-06

flac (1.1.2-3ubuntu1.1) dapper-security; urgency=low

  * SECURITY UPDATE: multiple integer overflows resulting in heap-based
    buffer overflows and potential remote code execution
  * debian/patches/05_SECURITY_CVE-2007-4619.dpatch: perform proper bounds
    checking, create safe memory allocation functions in alloc.h, and adjust
    source files to use these safe memory routines.
  * References
    CVE-2007-4619

 -- Jamie Strandboge <email address hidden>   Wed,  7 Nov 2007 16:19:42 -0500

1.1.4-3ubuntu1

Superseded in hardy-release on 2007-12-07

Obsolete in gutsy-release on 2011-09-16

flac (1.1.4-3ubuntu1) gutsy; urgency=low

  * debian/control: xmms-dev dropped to allow xmms to move to universe,
    adjust maintainer field.

 -- Kees Cook <email address hidden>   Thu, 21 Jun 2007 13:52:55 -0700

1.1.4-3

Superseded in gutsy-release on 2007-06-21

flac (1.1.4-3) unstable; urgency=low

  * The "It's Never Too Late to Mend" release.
  * Finally, since liboggflac and libflac have been merged, make libflac-dev
    depend on libogg-dev. closes: #427742

1.1.4-1

Superseded in gutsy-release on 2007-06-07

flac (1.1.4-1) unstable; urgency=low

  * New upstream release. closes: #405167, #411311
    - libOggFLAC and libOggFLAC++ have been merged into libFLAC, so
      remove their corresponding packages.
    - Because of the API changes required to effect the above, there has
      been yet another soname bump. libflac7 -> libflac8 and
      libflac++5 -> libflac++6. Emails have been dispatched to the
      maintainers of dependent packages.
  * Some notes on patches that were removed:
    - 02_stdin_stdout, 06_manpage_mention_utf8_convert: merged upstream
    - 08_manpage_warnings: Upstream has changed the manpage so it defintely
      can't fit in in 80 cols, so just forget about it. We'll live.
    - 05_eof_warnings_are_errors: Upstream decided to add a -w option to
      flac to treat all warnings as errors. I am going to defer to that
      for now, but if people think it's stupid let me know and I'll port
      the patch forward.
    - 04_stack_smasher: was a backport from 1.1.3, so it's obsolete.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  04 Jun 2007 08:36:18 +0100

1.1.2-6

Superseded in gutsy-release on 2007-06-04

flac (1.1.2-6) unstable; urgency=high

  * Update 04_stack_smasher.dpatch, a more complete fix backported from
    1.1.3. This should fix the XMMS crash issue, thanks Jan Luebbe.
    closes: #401774

 -- Martin Pitt <email address hidden>   Mon,  30 Apr 2007 07:02:59 +0100

1.1.2-5ubuntu2

Superseded in gutsy-release on 2007-04-30

Obsolete in feisty-release on 2009-08-20

flac (1.1.2-5ubuntu2) feisty; urgency=low

  * debian/control: Update maintainer fields according to debian-
    maintainer-field spec.

 -- Martin Pitt <email address hidden>   Thu, 22 Feb 2007 13:29:34 +0000

1.1.2-5ubuntu1

Superseded in feisty-release on 2007-02-22

Obsolete in edgy-release on 2008-06-19

flac (1.1.2-5ubuntu1) edgy; urgency=low

  * Resynchronise with Debian.

1.1.2-3ubuntu1

Superseded in edgy-release on 2006-06-30

Obsolete in dapper-release on 2011-09-06

Superseded in dapper-release on 2006-02-03

flac (1.1.2-3ubuntu1) dapper; urgency=low


  * Merge with Debian
    - We did the C++ transition earlier than Debian, so add c2 suffix to
      liboggflac++ and libflac++

 -- Tollef Fog Heen <email address hidden>  Thu, 10 Nov 2005 12:55:33 +0100

1.1.2-1ubuntu2

Obsolete in breezy-release on 2008-03-25

flac (1.1.2-1ubuntu2) breezy; urgency=low


  * Make sure save_http_path is NULL and not "" in order to fix free-ing
    of a statically allocated string.  Ubuntu #14825

 -- Tollef Fog Heen <email address hidden>  Tue, 20 Sep 2005 11:00:57 +0200

1.1.1-4

Obsolete in hoary-release on 2008-03-19

flac (1.1.1-4) unstable; urgency=low


  * Re-libtoolize to fix various build weirdnesses and a broken xmms-flac
    on amd64 (Closes: #289243)

 -- Matt Zimmerman <email address hidden>  Sat,  8 Jan 2005 15:08:22 -0800

1.1.0-11

Obsolete in warty-release on 2008-01-09

flac (1.1.0-11) unstable; urgency=low


  * Ensure that libFLAC is linked with -lm on all architectures, and
    regardless of whether nasm is present

 -- Matt Zimmerman <email address hidden>  Fri, 16 Apr 2004 15:14:31 -0700

Ubuntuflac package

Change log for flac package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
flac package