- libav (6:11.9-1~deb8u1+rpi1) jessie-staging; urgency=medium
++libav (6:11.11-1~deb8u1+rpi1) jessie-staging; urgency=medium
+
+ [changes brought forward from 6:11.3-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 29 Mar 2015 02:07:33 +0000]
+ * Add special case handling for Raspbian (and any derivatives thereof) (Closes: 738760)
+ + Disable armv6t2
+ - note: the thumb2 variant of arv6 seems to be very rare, the Pi certainly
+ doesn't have it.
+ + Disable neon in the main build.
+ + Don't build a seperate neon flavour either.
+
+ [changes brought forward from 6:11.4-1~deb8u1+rpi2 by Peter Michael Green <plugwash@raspbian.org> at Thu, 11 Feb 2016 15:58:25 +0000]
+ * Re-enable specific neon build.
+ * Move armv6t2 and neon disabling from overall configure flags to static
+ and shared configure flags so they don't impact the neon-specific build.
+
- -- Raspbian forward porter <root@raspbian.org> Wed, 26 Apr 2017 06:02:27 +0000
++ -- Raspbian forward porter <root@raspbian.org> Thu, 02 Nov 2017 11:26:23 +0000
++
+ libav (6:11.11-1~deb8u1) jessie-security; urgency=medium
+
+ * Non-maintainer upload by the Security Team.
+ * New upstream release fixing multiple security issues.
+ - dfa: Disallow odd width/height and add proper bounds check for DDS1 chunks
+ (CVE-2017-9992)
+ - pictor: Correctly check frame dimensions (CVE-2017-7862)
+ - h264_cavlc: check the value of run_before
+ - dvbsubdec: improve error checking
+ - dvbsubdec: Fixed segfault when decoding subtitles
+ - rmdec: don't ignore the return value of av_get_packet()
+ - caf: add an Opus tag
+ - yadif: Account for the buffer alignment while processing the frame edges
+ - mov: log and return early on non-positive stsd entry counts
+ - arm: Fix SIGBUS on ARM when compiled with binutils 2.29
+ - smacker: return meaningful error codes on failure
+ - smacker: fix integer overflow with pts_inc
+ - mm: Skip unexpected audio packets
+ - aacsbr: Turnoff in the event of over read.
+ - smacker: Check that the data size is a multiple of a sample vector
+ (CVE-2015-8365)
+ - build: Add an option for passing linker flags to the shared library build
+ - flv: Validate the packet size
+ - mjpeg: Report non-3 component rgb lossless as not supported
+ - vc1dec: raise an error if sprite picture data is missing
+ - doc: Drop the legacy symlink to README
+
+ -- Hugo Lefeuvre <hle@debian.org> Sat, 21 Oct 2017 15:08:38 +0200
libav (6:11.9-1~deb8u1) jessie-security; urgency=medium