lp:ubuntu/gutsy-updates/vlc

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

32. By Emanuele Gentili on 2008-04-01

* SECURITY UPDATE: (LP: #207284)
 + debian/patches/031_CVE-2008-1489.diff
  - Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c allows
    remote attackers to cause a denial of service (crash) and possibly
    execute arbitrary code via a crafted MP4 RDRF box that triggers a
    heap-based buffer overflow.

* References
 + http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1489
 + http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a

31. By Emanuele Gentili on 2008-02-27

* SECURITY UPDATE:
  - debian/patches/031_CVE-2008-0984.diff (LP: #195949)
   + VLC media player's MPEG-4 file format parser (a.k.a. the MP4 demuxer)
     suffers from an arbitrary memory overwrite vulnerability when using
     crash the player instance.

* References
  - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0984
  - http://www.videolan.org/security/sa0802.html

30. By Cesare Tirabassi on 2007-10-08

* Add patch 030_fix_exec_field_code:
  - fix opening multiple files leads to multiple instances (LP: #124712)

29. By William Grant on 2007-10-06

* Move firefox plugin into /usr/lib/firefox. (LP: #99810)
* Don't attempt to install a symlink for firefox to vlcintf.xpt - it doesn't
  exist any more.

28. By Vincent Legout on 2007-08-11

Fix typo error in .desktop file (LP: #131691)

27. By Hilario J. Montoliu (hjmf) on 2007-06-25

debian/control: added Xb-Npp-xxx tags accordingly to "firefox distro
add-on suport" spec,
(https://blueprints.launchpad.net/ubuntu/+spec/firefox-distro-addon-support)

26. By Daniel T Chen on 2007-06-25

* SECURITY UPDATE: Format string injection in multiple plugins could
  lead to arbitrary code execution and/or DoS.
* New upstream security and bugfix release, 0.8.6c (LP: #121511).
* References
  CVE-2007-0256
  CVE-2007-3316
* debian/patches/: Remove 020_flac.diff and 030_CVE-2007-0017.diff
  (subsumed by new upstream release).
* debian/vlc-nox.install: Add libtelx_plugin.so (fixes FTBFS).

25. By Matti Lindell <email address hidden> on 2007-06-10

* debian/patches/020_flac.diff:
 - Patch from upstream trunk to fix FTBFS with libflac8
   (http://trac.videolan.org/vlc/changeset/18855)

24. By Luke Yelavich on 2007-03-20

debian/control: Revert back to building against libwxgtk2.6-dev
(Closes LP: #91248)

23. By Daniel T Chen on 2007-03-10

debian/control: Work around LP #91086.