debian/0000775000000000000000000000000012676511634007203 5ustar debian/compat0000664000000000000000000000000212232474530010370 0ustar 9 debian/libmatroska6.install0000664000000000000000000000002412232474530013154 0ustar usr/lib/*/lib*.so.* debian/watch0000664000000000000000000000012212232474530010216 0ustar version=3 http://dl.matroska.org/downloads/libmatroska/libmatroska-(.*)\.tar\.bz2 debian/patches/0000775000000000000000000000000012674306617010633 5ustar debian/patches/series0000664000000000000000000000002712674060051012034 0ustar 030_CVE-2015-8792.diff debian/patches/030_CVE-2015-8792.diff0000664000000000000000000000210212674306617013453 0ustar URL: https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f Index: libmatroska-1.4.1/src/KaxBlock.cpp =================================================================== --- libmatroska-1.4.1.orig/src/KaxBlock.cpp 2016-03-22 19:22:54.000000000 +0100 +++ libmatroska-1.4.1/src/KaxBlock.cpp 2016-03-22 19:22:54.000000000 +0100 @@ -524,6 +524,8 @@ case LACING_EBML: SizeRead = LastBufferSize; FrameSize = ReadCodedSizeValue(cursor, SizeRead, SizeUnknown); + if (!FrameSize || (static_cast(FrameSize + SizeRead) > LastBufferSize)) + return Result; SizeList[0] = FrameSize; cursor += SizeRead; LastBufferSize -= FrameSize + SizeRead; @@ -532,6 +534,8 @@ // get the size of the frame SizeRead = LastBufferSize; FrameSize += ReadCodedSizeSignedValue(cursor, SizeRead, SizeUnknown); + if (!FrameSize || (static_cast(FrameSize + SizeRead) > LastBufferSize)) + return Result; SizeList[Index] = FrameSize; cursor += SizeRead; LastBufferSize -= FrameSize + SizeRead; debian/gbp.conf0000664000000000000000000000025012232474530010606 0ustar [DEFAULT] upstream-branch = upstream debian-branch = master upstream-tag = upstream/%(version)s debian-tag = debian/%(version)s pristine-tar = True compression = bzip2 debian/libmatroska-dev.install0000664000000000000000000000005112232474530013642 0ustar usr/include usr/lib/*/*.so usr/lib/*/*.a debian/changelog0000664000000000000000000002105712676511634011062 0ustar libmatroska (1.4.1-2+deb8u1build0.14.04.1) trusty-security; urgency=medium * fake sync from Debian -- Tyler Hicks Tue, 29 Mar 2016 09:39:24 -0500 libmatroska (1.4.1-2+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Wheezy LTS Team. * CVE-2015-8792: Fix invalid memory access issue. (patch taken from the squeeze version) -- Thorsten Alteholz Tue, 22 Mar 2016 18:03:02 +0100 libmatroska (1.4.1-2) unstable; urgency=low * Upload to unstable (Closes: #720181) -- Matteo F. Vescovi Fri, 08 Nov 2013 12:09:16 +0100 libmatroska (1.4.1-1) experimental; urgency=low * New upstream release - debian/rules: build install path updated -- Matteo F. Vescovi Mon, 23 Sep 2013 15:08:01 +0200 libmatroska (1.4.0-1) experimental; urgency=low * New upstream release - debian/: SONAME bump libmatroska5 => libmatroska6 - debian/control: libebml-dev bump 1.2.0 => 1.3.0 * debian/control: Standards-Version bumped to 3.9.4 * debian/control: Vcs-* URLs updated -- Matteo F. Vescovi Sat, 29 Jun 2013 15:06:42 +0200 libmatroska (1.3.0-2) unstable; urgency=low * debian/control: uploader's email address changed * debian/: Multi-Arch support added -- Matteo F. Vescovi Tue, 14 Feb 2012 15:00:29 +0100 libmatroska (1.3.0-1) unstable; urgency=low * New upstream release -- Matteo F. Vescovi Wed, 05 Oct 2011 13:53:52 +0200 libmatroska (1.2.0-1) unstable; urgency=low * Team upload. [ Fabian Greffrath ] * Remove myself from Uploaders. [ Alessio Treglia ] * New upstream release. (Closes: #631804) * SONAME bump: libmatroska3 -> libmatroska4. * Correct maintainer's name. * Remove useless shlibs:Depends macrom from -DEV's Depends field. * Remove useless debian/dirs file. * Remove useless debian/libmatroska-dev.{dirs,files}. * Remove useless debian/docs file. * Bump build-dep on libebml >= 1.2.1. * Bump Standards. -- Alessio Treglia Wed, 29 Jun 2011 15:20:29 +0200 libmatroska (1.1.0-2) unstable; urgency=low * Team upload. * upload to unstable. -- Reinhard Tartler Sat, 05 Mar 2011 18:03:18 +0100 libmatroska (1.1.0-1) experimental; urgency=low * New upstream version * debian/control,debian/libmatroska3.install: + bump library soname to libmatroska3 * debian/control: + bump dependency on libebml >= 1.2.0 -- Rico Tzschichholz Thu, 17 Feb 2011 22:36:44 +0100 libmatroska (1.0.0-1) experimental; urgency=low * Imported Upstream version 1.0.0 (Closes: #591287). * Add myself to uploaders. * Add debian/watch file. * Bump SONAME to libmatroska2. * Remove unnecessary files from debian/ directory. * Bump libebml-dev requirements to (>= 1.0.0). * Convert Debian packaging to dh7. * Wrap lines in debian/control and add ${misc:Depends}. * Update Vcs-* fields. * Add Homepage field. * Clarify license of the Debian packaging in debian/copyright. * Fix duplicate-short-description. * Fix old-fsf-address-in-copyright-file. * Fix spelling-error-in-copyright. * Omit building test for the time being. They fail if compiled without -finput-charset=ISO8859-15 and have not been built before anyway. * Drop all patches, not needed anymore. * Convert to Source Format 3.0 (quilt). * Bump Standards-Version to 3.9.1. * Add debian/gbp.conf file. -- Fabian Greffrath Mon, 02 Aug 2010 11:43:56 +0200 libmatroska (0.8.1-1.1) unstable; urgency=low * Non-maintainer upload. * debian/copyright: update with proper up to date informations (Closes: 465251). * debian/control: bump Standards-Version to 3.7.3. -- Pierre Habouzit Sun, 16 Mar 2008 14:07:52 +0100 libmatroska (0.8.1-1) unstable; urgency=low * New upstream release. * We now distribute shared libraries. * debian/rules: + No longer build _pic.a library. * debian/control: + Depend and build-depend on libebml-dev (>= 0.7.7-3). * debian/compat: + Set compat to 5. -- Sam Hocevar (Debian packages) Thu, 15 Mar 2007 19:34:20 +0100 libmatroska (0.8.0-3) unstable; urgency=low * debian/control: + Set pkg-multimedia-maintainers as main maintainer. + Added Vcs fields. + Set policy to 3.7.2. -- Sam Hocevar (Debian packages) Thu, 15 Mar 2007 16:57:59 +0100 libmatroska (0.8.0-2) unstable; urgency=low * Switched patch system to quilt. * debian/control: + Build-depend on quilt. + Build-depend on debhelper (>= 4.0). + Added Section: devel for the source. * debian/compat: + Set level to 4. * 010_propagate_cflags.diff: (new patch from old diff.gz) propagate custom CXXFLAGS to the build process. * 020_missing_timestamp.diff: (new patch from old diff.gz) fix for compilers that do not have __TIMESTAMP__. -- Sam Hocevar (Debian packages) Thu, 30 Mar 2006 17:14:29 +0200 libmatroska (0.8.0-1) unstable; urgency=low * New upstream version. -- Sam Hocevar (Debian packages) Sun, 30 Oct 2005 15:57:42 +0100 libmatroska (0.7.7-1) unstable; urgency=low * New upstream version. * debian/control: + Set policy to 3.6.2.1. -- Sam Hocevar (Debian packages) Fri, 15 Jul 2005 13:17:57 +0200 libmatroska (0.7.5-1) unstable; urgency=low * New upstream release. -- Sam Hocevar (Debian packages) Sat, 12 Mar 2005 18:28:04 +0100 libmatroska (0.7.4-1) unstable; urgency=low * New upstream release (Closes: #288717, #290688). -- Sam Hocevar (Debian packages) Sat, 12 Mar 2005 17:33:06 +0100 libmatroska (0.7.3-1) unstable; urgency=low * New upstream release (Closes: #271898). -- Sam Hocevar (Debian packages) Tue, 21 Sep 2004 13:42:41 +0200 libmatroska (0.7.0-2) unstable; urgency=low * debian/control: + Set policy to 3.6.1.1. + Build-depend on libebml (>= 0.7.0-2). -- Sam Hocevar (Debian packages) Tue, 27 Jul 2004 13:12:25 +0200 libmatroska (0.7.0-1) unstable; urgency=low * New upstream release. -- Sam Hocevar (Debian packages) Mon, 26 Apr 2004 22:29:48 +0200 libmatroska (0.6.2-1) unstable; urgency=low * New upstream release. -- Sam Hocevar (Debian packages) Tue, 6 Jan 2004 21:21:51 +0100 libmatroska (0.6.1-2) unstable; urgency=low * Added a __TIMESTAMP__ define to KaxConfig.h to avoid compilation issues. -- Sam Hocevar (Debian packages) Wed, 3 Dec 2003 11:44:36 +0100 libmatroska (0.6.1-1) unstable; urgency=low * New upstream release. -- Sam Hocevar (Debian packages) Tue, 4 Nov 2003 11:27:00 +0100 libmatroska (0.5.2-2) unstable; urgency=low * Fixed upstream's braindamaged use of DEB_BUILD_OPTIONS (Closes: #215774). -- Sam Hocevar (Debian packages) Wed, 15 Oct 2003 09:00:42 +0200 libmatroska (0.5.2-1) unstable; urgency=low * New upstream release (Closes: #214767). -- Sam Hocevar (Debian packages) Mon, 13 Oct 2003 10:40:30 +0200 libmatroska (0.5.0-4) unstable; urgency=low * Used "cvs2cl --utc --no-wrap -w --stdout -g -z9" to generate an upstream changelog (Closes: #208597). -- Sam Hocevar (Debian packages) Fri, 5 Sep 2003 09:26:58 +0200 libmatroska (0.5.0-3) unstable; urgency=low * make/linux/Makefile: + Fixed $(CUSTOMFLAGS) so that the PIC lib gets built. * debian/control: + Set policy to 3.6.1.0. -- Sam Hocevar (Debian packages) Tue, 2 Sep 2003 21:12:08 +0200 libmatroska (0.5.0-2) unstable; urgency=low * debian/control: + Downgraded debhelper build-dependency to allow easier backporting. + Enhanced the long description. -- Sam Hocevar (Debian packages) Thu, 14 Aug 2003 11:06:11 +0200 libmatroska (0.5.0-1) unstable; urgency=low * New upstream release. * debian/control: + Set policy to 3.6.0. No changes required. + Set debhelper build-dependency to (>= 4.0) because of debian/compat. -- Sam Hocevar (Debian packages) Thu, 7 Aug 2003 14:54:50 +0200 libmatroska (0.4.4+cvs.20030622-1) unstable; urgency=low * First Debian release (Closes: #198445). * debian/control: + Set policy to 3.5.10. + Removed leading "an" from upstream's description. * debian/rules: + Ship PIC libraries so that application plugins can be linked with us. -- Sam Hocevar (Debian packages) Wed, 25 Jun 2003 05:22:08 +0200 debian/rules0000775000000000000000000000043212232474530010251 0ustar #!/usr/bin/make -f DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH) %: dh $@ --sourcedirectory=make/linux override_dh_auto_install: dh_auto_install -- \ prefix=/usr \ libdir=/usr/lib/$(DEB_HOST_MULTIARCH) override_dh_auto_test: dh_auto_test --no-act debian/copyright0000664000000000000000000000464612232474530011137 0ustar This package was debianized by Moritz Bunkus on Mon, 21 Apr 2003 12:49:33 +0200. It was downloaded from http://dl.matroska.org/downloads/libmatroska/ Files: debian/* Copyright: © 2003 Moritz Bunkus © 2010 Fabian Greffrath License: GPL-2+ The Debian packaging licensed under the GPL version 2, or (at your option) any later version, see below. Files: test/ebml/*.cpp test/tags/test9.cpp test/utf8/test5.cpp Copyright: (C) 2002-2004 Steve Lhomme. All rights reserved. License: QPL | GPL-2 This file may be distributed under the terms of the Q Public License as defined by Trolltech AS of Norway and appearing in the file LICENSE.QPL included in the packaging of this file. . This file may be distributed and/or modified under the terms of the GNU General Public License version 2 as published by the Free Software Foundation and appearing in the file LICENSE.GPL included in the packaging of this file. . Licensees holding another license may use this file in accordance with the Agreement provided with the Software. . This file is provided AS IS with NO WARRANTY OF ANY KIND, INCLUDING THE WARRANTY OF DESIGN, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. . See http://www.matroska.org/license/qpl/ for QPL licensing information. See http://www.matroska.org/license/gpl/ for GPL licensing information. . Contact license@matroska.org if any conditions of this licensing are not clear to you. Files: * Copyright: (C) 2002-2005 Steve Lhomme. All rights reserved. License: LGPL-2.1 This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. . This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. . You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA On Debian systems, the full text of the LGPL v2.1 can be found in /usr/share/common-licenses/LGPL-2.1, and of the GPL v2 in /usr/share/common-licenses/GPL-2. debian/source/0000775000000000000000000000000012232474530010472 5ustar debian/source/format0000664000000000000000000000001412232474530011700 0ustar 3.0 (quilt) debian/control0000664000000000000000000000351412232474530010600 0ustar Source: libmatroska Section: devel Priority: optional Maintainer: Debian Multimedia Maintainers Uploaders: Sam Hocevar (Debian packages) , Rico Tzschichholz , Matteo F. Vescovi Build-Depends: debhelper (>= 9), libebml-dev (>= 1.3.0) Standards-Version: 3.9.4 Vcs-Git: git://anonscm.debian.org/pkg-multimedia/libmatroska.git Vcs-Browser: http://anonscm.debian.org/?p=pkg-multimedia/libmatroska.git Homepage: http://www.matroska.org/ Package: libmatroska6 Section: libs Architecture: any Multi-Arch: same Pre-Depends: ${misc:Pre-Depends} Depends: ${shlibs:Depends}, ${misc:Depends} Description: extensible open standard audio/video container format (shared library) Matroska is aiming to become the standard of Multimedia Container Formats one day. It is based on EBML (Extensible Binary Meta Language), a kind of binary version of XML. This way the significant advantages in terms of future format extensibility are gained without breaking file support in old parsers. . This package contains the shared library needed to run applications that use libmatroska. Package: libmatroska-dev Section: libdevel Architecture: any Multi-Arch: same Depends: libmatroska6 (= ${binary:Version}), libebml-dev (>= 1.3.0), ${misc:Depends} Description: extensible open standard audio/video container format (development files) Matroska is aiming to become the standard of Multimedia Container Formats one day. It is based on EBML (Extensible Binary Meta Language), a kind of binary version of XML. This way the significant advantages in terms of future format extensibility are gained without breaking file support in old parsers. . This package contains the header files and static libraries needed to compile applications that use libmatroska.