← Back to team overview

registry team mailing list archive

[Bug 616510] Re: Insufficient validation of ID3v2 tags

 

This bug was fixed in the package vlc - 1.1.3-2ubuntu1

---------------
vlc (1.1.3-2ubuntu1) maverick; urgency=low

  * Merge from Debian experimental, remaining changes:
    - build and install the libx264 plugin

vlc (1.1.3-2) experimental; urgency=low

  [ Christophe Mutricy ]
  * Depends on xulrunner-dev >= 1.9.2
  * Activate VA-API (Closes: #587792, LP: #539406)

  [ Benjamin Drung ]
  * Switch to dh7.
  * Move libavcodec plugin from vlc-nox to vlc.
  * Add Xb-Npp header to mozilla-plugin-vlc package. (Not doing anything
    on Debian at the moment, see #484010)
  * Add apport hook to include more VLC dependencies in bug reports and
    install it on Ubuntu.

vlc (1.1.3-1) unstable; urgency=medium

  [ Benjamin Drung ]
  * New upstream release.
    + Fix insufficient input validation in TagLib plugin.
      (VideoLAN-SA-1004, CVE-2010-2937) (Closes: #592669, LP: #616510)
    + Set urgency to medium
  * 502_xulrunner_191.diff: Shorten, split into two parts, and refresh it.
  * Drop 102_dejavu_font.diff and depend on ttf-freefont instead of ttf-
    dejavu-core. ttf-freefont is very likely to be present on a Debian
    box, because cups depends on it.
  * Drop 501_decrease_alsa_buffer.diff. The pulseaudio output module has
    a higher priority than the ALSA output plugin and should be used on
    pulseaudio systems.

  [ Reinhard Tartler ]
  * add DM-Upload-Allowed field to debian/control
 -- Benjamin Drung <bdrung@xxxxxxxxxx>   Thu, 19 Aug 2010 23:16:03 +0200

** Changed in: vlc (Ubuntu)
       Status: Confirmed => Fix Released

-- 
Insufficient validation of ID3v2 tags
https://bugs.launchpad.net/bugs/616510
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for Debian.