CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2010/09/29 05:30:03
Modified files:
x11/vlc : Makefile
Added files:
x11/vlc/patches: patch-modules_meta_engine_taglib_cpp
Log message:
Fix for CVE-2010-2937 (Insufficient input validation in VLC TagLib
plugin) :
"VLC fails to perform sufficient input validation when trying to extract
some meta-informations about input media through ID3v2 tags. In the
failure case, VLC attempt dereference an invalid memory address, and a
crash will ensure."
>From brad via sthen@
