fyi, upstream just released version 0.5.1 [0], and it looks like they backported all of these security fixes, so it may be easier to figure out the needed patches from the diff there.
would it be wise to plan to ship squeeze with their stable point releases rather than their latest svn? thanks for working on these issues! mike [0] http://ffmpeg.org/releases/ffmpeg-0.5.1.release -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

