Changelog for
libquicktime-tools-debuginfo-1.2.4cvs20150223-lp150.4.22.x86_64.rpm :
* Tue Nov 28 2017 zaitorAATTopensuse.org- Add %%{name} Requires to orig-addon sub-package, installing the addon-package does not make sense without the main package.
* Fri Nov 03 2017 zaitorAATTopensuse.org- Drop gtk2-devel BuildRequires and pass --without-gtk to configure, no longer build gtk2 support.- Following the above, stop using sed to remove GTK_DISABLE_DEPRECATED from configure.ac, no longer needed.- Add explicit pkgconfig(libpng) BuildRequries, previously pulled in by the gtk2-devel BuildRequries.
* Fri Aug 25 2017 olafAATTaepfle.de- Enable lame unconditionally- Remove ffmpeg conditional because it is always present
* Tue Jul 04 2017 kstreitovaAATTsuse.com- adjust libquicktime-1.2.4-integer_overflow.patch to prevent endless loop when there are less than 256 bytes to read [bsc#1022805] CVE-2016-2399
* Fri Jun 23 2017 kstreitovaAATTsuse.com- add libquicktime-1.2.4-multiple_vulnerabilities.patch to fix the following security issues:
* CVE-2017-9122 [bsc#1044077]
* CVE-2017-9123 [bsc#1044009]
* CVE-2017-9124 [bsc#1044008]
* CVE-2017-9125 [bsc#1044122]
* CVE-2017-9126 [bsc#1044006]
* CVE-2017-9127 [bsc#1044002]
* CVE-2017-9128 [bsc#1044000]
* Sat Feb 25 2017 zaitorAATTopensuse.org- Move unversioned so files to previously not built main package.- Following this, split out a new sub-package libquicktime-orig-addon, built depending on macro BUILD_ORIG.- Split out a new lang subpackage.- Stop providing/obsoleting libquicktime last available in openSUSE 11.4.
* Thu Feb 16 2017 jengelhAATTinai.de- Rename %soname to %sover to better reflect its use. Correct RPM group.
* Tue Feb 14 2017 kstreitovaAATTsuse.com- add libquicktime-1.2.4-integer_overflow.patch to fix integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier that allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom [bsc#1022805] CVE-2016-2399
* Mon Jul 25 2016 olafAATTaepfle.de- Convert buildconditionals for faac, faad, lame and x264
* Wed Feb 17 2016 olafAATTaepfle.de- Remove usage of some deprecated names to fix compile with ffmpeg3 libquicktime-ffmpeg3.patch- Fix compiler warning about incorrect memset args libquicktime-faad2.patch
* Fri Dec 11 2015 tchvatalAATTsuse.com- Use ffmpeg even in OBS with reduced scope of course- Cleanup with spec-cleaner
* Tue Sep 22 2015 olafAATTaepfle.de- Use pkgconfig for ffmpeg BuildRequires
* Mon Feb 23 2015 avvissuAATTyandex.ru- Update to cvs20150223:- Remove all patches (fixed in upstream):
* libquicktime-1.2.2-dont_disable_deprecated.patch
* libquicktime-libpng16.patch