mplayer - Debian Package Tracker

general

source: mplayer (main)
version: 2:1.4+ds1-3
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: Miguel A. Colón Vélez [DMD] – A Mennucc1 [DMD] – Reinhard Tartler [DMD]
arch: all any
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2:1.3.0-6
oldstable: 2:1.3.0-8
stable: 2:1.4+ds1-1
unstable: 2:1.4+ds1-3

versioned links

2:1.3.0-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:1.3.0-8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:1.4+ds1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:1.4+ds1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

mencoder (2 bugs: 0, 1, 1, 0)
mplayer (22 bugs: 0, 19, 3, 0)
mplayer-doc
mplayer-gui (5 bugs: 0, 2, 3, 0)

action needed

A new upstream version is available: 1.5 high

A new upstream version 1.5 is available, you should consider packaging it.

Created: 2022-03-02 Last update: 2022-09-27 04:02

7 security issues in sid high

There are 7 open security issues in sid.

7 important issues:

CVE-2022-38600: Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
CVE-2022-38856: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38858: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38860: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38861: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
CVE-2022-38862: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38864: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.

Created: 2022-09-16 Last update: 2022-09-23 15:11

7 security issues in buster high

There are 7 open security issues in buster.

7 important issues:

CVE-2022-38600: Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
CVE-2022-38856: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38858: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38860: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38861: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
CVE-2022-38862: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38864: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.

Created: 2022-09-16 Last update: 2022-09-23 15:11

7 security issues in bullseye high

There are 7 open security issues in bullseye.

6 important issues:

CVE-2022-38600: Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
CVE-2022-38856: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38858: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38860: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
CVE-2022-38861: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
CVE-2022-38864: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.

1 issue left for the package maintainer to handle:

CVE-2022-38862: (needs triaging) Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

You can find information about how to handle this issue in the security team's documentation.

Created: 2022-09-16 Last update: 2022-09-23 15:11

lintian reports 816 errors and 3 warnings high

Lintian reports 816 errors and 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2022-07-30 Last update: 2022-07-30 12:15

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2022-05-02 Last update: 2022-09-27 04:36

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2022-08-19 Last update: 2022-09-27 04:32

Depends on packages which need a new maintainer normal

The packages that mplayer depends on which need a new maintainer are:

nas (#354174)
- Depends: libaudio2 libaudio2
- Build-Depends: libaudio-dev
enca (#953094)
- Depends: libenca0 libenca0 libenca0
- Build-Depends: libenca-dev
yasm (#1011573)
- Build-Depends: yasm
libdv (#814889)
- Depends: libdv4 libdv4 libdv4
libbs2b (#1007187)
- Depends: libbs2b0 libbs2b0 libbs2b0
- Build-Depends: libbs2b-dev

Created: 2019-11-22 Last update: 2022-09-27 03:34

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit f8ba5ba02402968115211a4cace92c66c17a294d
Merge: 805a80e4 5f941e74
Author: Sebastian Ramacher <sramacher@debian.org>
Date:   Thu Feb 17 14:37:38 2022 +0000

    Merge branch 'scrub-obsolete' into 'master'
    
    Remove unnecessary constraints
    
    See merge request multimedia-team/mplayer!2

commit 5f941e7471be7a65767f081e099ca7564633a825
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Fri Feb 4 14:09:07 2022 +0000

    Remove constraints unnecessary since buster
    
    * Build-Depends: Drop versioned constraint on libavcodec-dev, libavformat-dev, libavutil-dev, libpostproc-dev and libswscale-dev.
    
    Changes-By: deb-scrub-obsolete

Created: 2022-02-17 Last update: 2022-09-23 13:08

AppStream hints: 1 warning normal

AppStream found metadata issues for packages:

mplayer-gui: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2020-06-01 Last update: 2020-06-01 01:13

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2017-12-06 Last update: 2022-06-17 06:36

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-05-11 23:25

testing migrations

This package will soon be part of the auto-libmng transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- Migrates after: mplayer-blue
- Migration status for mplayer (- to 2:1.4+ds1-3): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating mplayer would introduce bugs in testing: #1004579, #1005899
- ∙ ∙ Impossible Depends: mplayer -> libavcodec-extra58/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libavcodec58/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libavformat58/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libavutil56/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/amd64
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/arm64
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/armel
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/armhf
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/i386
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/mips64el
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/ppc64el
- ∙ ∙ Impossible Depends: mplayer -> libpostproc55/7:4.4.2-1+b3/s390x
- ∙ ∙ Impossible Depends: mplayer -> libswresample3/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/amd64
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/arm64
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/armel
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/armhf
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/i386
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/mips64el
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/mipsel
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/ppc64el
- ∙ ∙ Impossible Depends: mplayer -> libswscale5/7:4.4.2-1+b3/s390x
- ∙ ∙ Depends: mplayer mplayer-blue
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/m/mplayer.html
- ∙ ∙ 253 days old (needed 5 days)
- Not considered

news

[rss feed]

[2022-05-03] mplayer REMOVED from testing (Debian testing watch)
[2022-01-22] mplayer 2:1.4+ds1-3 MIGRATED to testing (Debian testing watch)
[2022-01-16] Accepted mplayer 2:1.4+ds1-3 (source) into unstable (Sebastian Ramacher)
[2021-09-18] mplayer 2:1.4+ds1-2 MIGRATED to testing (Debian testing watch)
[2021-09-10] Accepted mplayer 2:1.4+ds1-2 (source) into unstable (Sebastian Ramacher)
[2020-10-20] mplayer 2:1.4+ds1-1 MIGRATED to testing (Debian testing watch)
[2020-10-14] Accepted mplayer 2:1.4+ds1-1 (source) into unstable (Sebastian Ramacher)
[2020-10-14] Accepted mplayer 2:1.3.0-9 (source) into unstable (Sebastian Ramacher)
[2018-05-05] mplayer 2:1.3.0-8 MIGRATED to testing (Debian testing watch)
[2018-04-27] Accepted mplayer 2:1.3.0-8 (source) into unstable (James Cowgill)
[2017-10-29] mplayer 2:1.3.0-7 MIGRATED to testing (Debian testing watch)
[2017-10-22] Accepted mplayer 2:1.3.0-7 (source) into unstable (James Cowgill)
[2016-12-25] mplayer 2:1.3.0-6 MIGRATED to testing (Debian testing watch)
[2016-12-14] Accepted mplayer 2:1.3.0-6 (source) into unstable (James Cowgill)
[2016-11-28] mplayer 2:1.3.0-5 MIGRATED to testing (Debian testing watch)
[2016-11-22] Accepted mplayer 2:1.3.0-5 (source) into unstable (Sebastian Ramacher)
[2016-11-01] mplayer 2:1.3.0-4 MIGRATED to testing (Debian testing watch)
[2016-10-26] Accepted mplayer 2:1.3.0-4 (source) into unstable (James Cowgill)
[2016-07-17] mplayer 2:1.3.0-3 MIGRATED to testing (Debian testing watch)
[2016-07-11] Accepted mplayer 2:1.3.0-3 (source) into unstable (Sebastian Ramacher)
[2016-06-01] mplayer 2:1.3.0-2 MIGRATED to testing (Debian testing watch)
[2016-05-26] Accepted mplayer 2:1.3.0-2 (source amd64 all) into unstable, unstable (Miguel A. Colón Vélez) (signed by: Sebastian Ramacher)
[2016-05-07] mplayer 2:1.3.0-1 MIGRATED to testing (Debian testing watch)
[2016-05-04] Accepted mplayer 2:1.0~rc4.dfsg1+svn34540-1+deb7u2 (source i386 all) into oldstable (signed by: Thorsten Alteholz)
[2016-04-17] Accepted mplayer 2:1.3.0-1 (source) into unstable (Mateusz Łukasik) (signed by: Sebastian Ramacher)
[2016-02-29] mplayer 2:1.2.1-1 MIGRATED to testing (Debian testing watch)
[2016-02-24] Accepted mplayer 2:1.2.1-1 (source) into unstable (Miguel A. Colón Vélez)
[2015-11-08] mplayer 2:1.2-1 MIGRATED to testing (Britney)
[2015-11-02] Accepted mplayer 2:1.2-1 (source) into unstable (Miguel A. Colón Vélez)
[2015-09-21] mplayer 2:1.1.1+svn37434-3 MIGRATED to testing (Britney)

bugs [bug history graph]

all: 28 33
RC: 2
I&N: 19 24
M&W: 7
F&P: 0
patch: 1

links

homepage
lintian (816, 3)
buildd: logs, checks, clang, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2:1.4+ds1-3ubuntu1
177 bugs (3 patches)
patches for 2:1.4+ds1-3ubuntu1