--- ffmpeg.spec.orig	2004-05-31 11:31:15 +0400
+++ ffmpeg.spec	2005-12-07 14:43:04 +0300
@@ -8,7 +8,7 @@
 
 Name: ffmpeg
 Version: 0.4.8
-%define release alt6
+%define release alt7
 
 %ifdef cvsdate
 Release: %{release}cvs%cvsdate
@@ -28,6 +28,9 @@
 Source: %name-%cvsdate.tar.bz2
 %endif
 
+# fix for heap buffer overflow (backported from FFmpeg CVS)
+Patch: ffmpeg-0.4.8-fix-overflow.patch
+
 # Automatically added by buildreq on Mon May 31 2004
 BuildRequires: XFree86-devel XFree86-libs esound freetype2-devel imlib2-devel libSDL-devel libfaac-devel libfaad-devel liblame-devel libogg-devel libvorbis-devel tetex-core zlib-devel
 
@@ -82,6 +85,7 @@
 %setup -q -n %name-%cvsdate
 %endif
 
+%patch -p0
 %__subst 's,\-lImlib2,`imlib2-config --libs`,' configure
 
 %build
@@ -135,6 +139,9 @@
 %doc doc/{TODO,*.txt,*.html}
 
 %changelog
+* Wed Dec 07 2005 Grigory Batalov <bga@altlinux.ru> 0.4.8-alt7cvs20040520
+- fix for heap buffer overflow (backported from FFmpeg CVS)
+
 * Mon May 31 2004 Yuri N. Sedunov <aris@altlinux.ru> 0.4.8-alt6cvs20040520
 - new cvs snapshot to build vlc-0.7.2
 
