CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2011/01/14 14:52:37
Modified files:
x11/vlc : Tag: OPENBSD_4_8 Makefile
Added files:
x11/vlc/patches: Tag: OPENBSD_4_8
patch-modules_meta_engine_taglib_cpp
Log message:
Fix for CVE-2010-2937 (Insufficient input validation in VLC TagLib
plugin) :
"VLC fails to perform sufficient input validation when trying to extract
some meta-informations about input media through ID3v2 tags. In the
failure case, VLC attempt dereference an invalid memory address, and a
crash will ensure."
>From brad via sthen@
