Ubuntu
vlc package

vlc 0.9.4-1ubuntu3.2 source package in Ubuntu

Changelog

vlc (0.9.4-1ubuntu3.2) intrepid-security; urgency=low

  * SECURITY UPDATE: Arbitrary code execution via stack-based overflow in
    the Ty demux plugin (LP: #285922)
    - debian/patches/901_CVE-2008-4654.patch: don't overflow mst_buf in
      modules/demux/ty.c
    - CVE-2008-4654
  * SECURITY UPDATE: Arbitrary code execution via integer overflows in
    the Ty demux plugin (LP: #285922)
    - debian/patches/902_CVE-2008-4686.patch: make some variables unsigned
      in modules/demux/ty.c so they don't overflow.
    - CVE-2008-4686
  * SECURITY UPDATE: Arbitrary code execution via stack-based buffer
    overflow via invalid RealText subtitle file.
    - debian/patches/903_CVE-2008-5036.patch: limit sscanf sizes in
      modules/demux/subtitle.c
    - CVE-2008-5036
  * SECURITY UPDATE: Arbitrary code execution via heap-based buffer
    overflow via malformed RealMedia file.
    - debian/patches/904_CVE-2008-5276.patch: replace malloc with calloc in
      modules/demux/real.c
    - CVE-2008-5276
  * SECURITY UPDATE: Denial of service via long input argument.
    - debian/patches/905_CVE-2009-1045.patch: make sure we can't overflow
      psz_dup in src/input/input.c
    - CVE-2009-1045

 -- Marc Deslauriers <email address hidden>   Sun, 28 Jun 2009 12:13:15 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Intrepid
Original maintainer:
MOTU
Architectures:
any
Section:
graphics
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
vlc_0.9.4.orig.tar.gz 21.5 MiB 370e98d628c34185b273af3fd602b40422ae9a6b16ef0324ae02199d55c7d7a8
vlc_0.9.4-1ubuntu3.2.diff.gz 50.3 KiB 6e4c784fe2b0f5b64be47c75f6d2adc833b3d23c72d8a05acb1c395deeb406ce
vlc_0.9.4-1ubuntu3.2.dsc 3.2 KiB cddc277be91901309410a12aaf1cb8db60e04f296756b6c7a70591af374d1e6a

View changes file

Binary packages built by this source

libvlc-dev: No summary available for libvlc-dev in ubuntu intrepid.

No description available for libvlc-dev in ubuntu intrepid.

libvlc2: No summary available for libvlc2 in ubuntu intrepid.

No description available for libvlc2 in ubuntu intrepid.

libvlccore-dev: No summary available for libvlccore-dev in ubuntu intrepid.

No description available for libvlccore-dev in ubuntu intrepid.

libvlccore0: No summary available for libvlccore0 in ubuntu intrepid.

No description available for libvlccore0 in ubuntu intrepid.

mozilla-plugin-vlc: No summary available for mozilla-plugin-vlc in ubuntu intrepid.

No description available for mozilla-plugin-vlc in ubuntu intrepid.

vlc: No summary available for vlc in ubuntu intrepid.

No description available for vlc in ubuntu intrepid.

vlc-data: No summary available for vlc-data in ubuntu intrepid.

No description available for vlc-data in ubuntu intrepid.

vlc-dbg: No summary available for vlc-dbg in ubuntu intrepid.

No description available for vlc-dbg in ubuntu intrepid.

vlc-nox: No summary available for vlc-nox in ubuntu intrepid.

No description available for vlc-nox in ubuntu intrepid.

vlc-plugin-arts: No summary available for vlc-plugin-arts in ubuntu intrepid.

No description available for vlc-plugin-arts in ubuntu intrepid.

vlc-plugin-esd: No summary available for vlc-plugin-esd in ubuntu intrepid.

No description available for vlc-plugin-esd in ubuntu intrepid.

vlc-plugin-ggi: No summary available for vlc-plugin-ggi in ubuntu intrepid.

No description available for vlc-plugin-ggi in ubuntu intrepid.

vlc-plugin-jack: No summary available for vlc-plugin-jack in ubuntu intrepid.

No description available for vlc-plugin-jack in ubuntu intrepid.

vlc-plugin-pulse: No summary available for vlc-plugin-pulse in ubuntu intrepid.

No description available for vlc-plugin-pulse in ubuntu intrepid.

vlc-plugin-sdl: No summary available for vlc-plugin-sdl in ubuntu intrepid.

No description available for vlc-plugin-sdl in ubuntu intrepid.

vlc-plugin-svgalib: No summary available for vlc-plugin-svgalib in ubuntu intrepid.

No description available for vlc-plugin-svgalib in ubuntu intrepid.