summaryrefslogtreecommitdiffstats
path: root/multimedia/winff/changelog
diff options
context:
space:
mode:
Diffstat (limited to 'multimedia/winff/changelog')
-rw-r--r--multimedia/winff/changelog128
1 files changed, 128 insertions, 0 deletions
diff --git a/multimedia/winff/changelog b/multimedia/winff/changelog
new file mode 100644
index 0000000000..e464b2ee64
--- /dev/null
+++ b/multimedia/winff/changelog
@@ -0,0 +1,128 @@
+Changelog for Winff SlackBuild Script
+--------------------------------------------------------------------
+
+09/09/2022:
+
+Took over as maintainer for the Winff SlackBuild
+script.
+
+The Original author of Winff no longer maintains and is
+now maintained by Debian Maintainer Paul Gevers.
+
+Corrected the various dead URL.Updated the various URL to
+https.patched it to look in the slackware's doc folder.
+see these posts for details.
+https://github.com/WinFF/winff/issues/250
+https://ffmpeg.org/download.html#build-windows
+
+24/09/2022:
+
+Winff will now use the users default pdf viewer using
+xdg-open also added support for Okular pdf reader. It will
+now use the -O2 optimization and added some hardening flags
+to the linker and fix wrongly escaped single quote in the
+man page.I've added these patches from Debian Maintainer
+Paul Gevers.
+
+Removed the hint that said TEST in the lower left side corner
+of the GUI,when you hover the mouse in the area between the
+convert button and options button.Fixed the Dialog boxes under
+the Ffmpeg tab were it will now show pass 1 and pass 2 separately
+previously the pass 1 dialog was merged with the top parameter
+dialog box.Put Underscore between the "Cancel Changes",
+"Apply Changes" and "Apply to All" buttons and will now be
+further apart for clarity. From FFmpeg versions 5 and later
+the -vol command will fail.For example -vol 512 has been changed
+to -filter:a "volume=1.5", since slackware uses FFmpeg4
+this is not a problem for now.Added Hints to the 2 buttons
+next to the folder path.The open was not working due to
+older lazarus not passing commands updating to Lazarus 2.2.2-0
+will solve that problem.If you cross compile winff for windows
+without patching the language files it will show the old links.
+Thanks to David Miller for patches,Improvments and testing Winff.
+
+Created a set of patches instead of sed commands.
+
+Extended the Copyright, which previously was upto the year 2016.
+
+GTK2 has reached end of life also GTK3 widget set support in
+lazarus is in alpha stage in lazarus.See the following post
+for details.
+
+https://blog.gtk.org/2020/12/16/gtk-4-0/
+https://wiki.freepascal.org/Widgetset
+
+As such it no longer make sense to default to GTK.We will
+now default to qt5 nstead of GTK.Therefore libqtpas is now a
+dependency. Install libqtpas before installing lazarus.
+
+Removed a Dangling link to AV GNU/Linux Distro.
+
+If for Some reason "Cancel changes","Apply to all" and
+"Apply changes" button does not appear do not fret, Enter the
+Values you need to modify in Video/Audio/Crop/Time and then
+add the file to convert it would pass the options.You can check
+the Command in the FFmpeg tab. This is a workaround.
+
+Patched the manpage to show the winff docmentation location
+in slackware.
+
+This build removes all other localization files except english
+since it contains outdated links and may pose security risk.
+Bumped the build no.
+
+20/01/2023:
+
+Fixed $ARCH issue for 32-bit systems. freepascal supports i386
+only. The SlackBuild is modified to reflect that.Bumped the
+build no.
+
+Users of WinFF must be aware of these two security issues that are
+still unresolved upstream.
+
+a. The first one is due to the way filenames are inserted in the
+temporary shell scripts generated to convert the media. Due to the
+lack of character escaping, it is possible to insert system command using
+specially crafted filename such as 'aaa";xcalc;".avi' or "aaa$(xcalc).mp4'
+Thus leading to an arbitrary command execution.
+
+b. The second issue is related to the permission of this temporary shell
+script. every users can access to them and modify them. Even if those files
+are only temporary and launched right after generation, it leads to a
+race-condition case where another user may try to replace the script content
+before its execution in order to execute its own command with the winff
+user permission.
+
+you can read about this issue here:
+https://github.com/WinFF/winff/issues/242
+
+As for first issue check the filename before converting otherwise it
+will compromise your system and don't download from untrusted sources.
+For the second I have no clue and this is beyond my abilities.If you have
+a patch for these issue feel free to send it to me.
+
+
+11/01/2024:
+
+Upgraded to the latest git commit 31b79e3.
+
+22/01/2024:
+
+Added -pie and -zdefs hardening flags to linker.
+Bumped the build no.
+
+27/02/2024:
+
+Updated to version 1.6.3
+
+03/03/2024:
+
+Resubmit to SBo
+Modify the SlackBuild to avoid creating object code files to /usr/share/lazarus
+when compiling winff and remove unused function in doinst.sh Thanks to Andrew Clemons
+for pointing it out.
+
+27/04/2024:
+
+Updated to version 1.6.4
+Fixed dead links. Fix documentation to properly open the pdf.