registry team mailing list archive
-
registry team
-
Mailing list archive
-
Message #12012
[Bug 616510] Re: Insufficient validation of ID3v2 tags
This bug was fixed in the package vlc - 1.1.3-2ubuntu1
---------------
vlc (1.1.3-2ubuntu1) maverick; urgency=low
* Merge from Debian experimental, remaining changes:
- build and install the libx264 plugin
vlc (1.1.3-2) experimental; urgency=low
[ Christophe Mutricy ]
* Depends on xulrunner-dev >= 1.9.2
* Activate VA-API (Closes: #587792, LP: #539406)
[ Benjamin Drung ]
* Switch to dh7.
* Move libavcodec plugin from vlc-nox to vlc.
* Add Xb-Npp header to mozilla-plugin-vlc package. (Not doing anything
on Debian at the moment, see #484010)
* Add apport hook to include more VLC dependencies in bug reports and
install it on Ubuntu.
vlc (1.1.3-1) unstable; urgency=medium
[ Benjamin Drung ]
* New upstream release.
+ Fix insufficient input validation in TagLib plugin.
(VideoLAN-SA-1004, CVE-2010-2937) (Closes: #592669, LP: #616510)
+ Set urgency to medium
* 502_xulrunner_191.diff: Shorten, split into two parts, and refresh it.
* Drop 102_dejavu_font.diff and depend on ttf-freefont instead of ttf-
dejavu-core. ttf-freefont is very likely to be present on a Debian
box, because cups depends on it.
* Drop 501_decrease_alsa_buffer.diff. The pulseaudio output module has
a higher priority than the ALSA output plugin and should be used on
pulseaudio systems.
[ Reinhard Tartler ]
* add DM-Upload-Allowed field to debian/control
-- Benjamin Drung <bdrung@xxxxxxxxxx> Thu, 19 Aug 2010 23:16:03 +0200
** Changed in: vlc (Ubuntu)
Status: Confirmed => Fix Released
--
Insufficient validation of ID3v2 tags
https://bugs.launchpad.net/bugs/616510
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for Debian.