-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 11 Jan 2008 15:05:10 +0100
Source: vlc
Binary: wxvlc vlc-plugin-sdl vlc-plugin-ggi vlc-plugin-alsa vlc-plugin-glide
vlc-plugin-esd mozilla-plugin-vlc vlc libvlc0 vlc-plugin-arts vlc-nox
vlc-plugin-svgalib libvlc0-dev
Architecture: source all i386
Version: 0.8.6.c-4.1
Distribution: unstable
Urgency: high
Maintainer: Debian multimedia packages maintainers <[EMAIL PROTECTED]>
Changed-By: Nico Golde <[EMAIL PROTECTED]>
Description:
libvlc0 - multimedia player and streamer library
libvlc0-dev - development files for VLC
mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
vlc - multimedia player and streamer
vlc-nox - multimedia player and streamer (without X support)
vlc-plugin-alsa - dummy transitional package
vlc-plugin-arts - aRts audio output plugin for VLC
vlc-plugin-esd - Esound audio output plugin for VLC
vlc-plugin-ggi - GGI video output plugin for VLC
vlc-plugin-glide - Glide video output plugin for VLC
vlc-plugin-sdl - SDL video and audio output plugin for VLC
vlc-plugin-svgalib - SVGAlib video output plugin for VLC
wxvlc - dummy transitional package
Closes: 458318
Changes:
vlc (0.8.6.c-4.1) unstable; urgency=high
.
* Non-maintainer upload by security team.
* This update addresses the following security issues
(CVE ids pending; Closes: #458318):
- Fix format string issue in internal webserver that could lead to
to arbitrary code execution (sec-httpd_formatstring.diff).
- Disable m3u EXTVLCOPT parsing if no command line option is specified
(--m3u-extvlcopt) to prevent browser plugins to control stream output
and thus overwriting arbitrary files of the user running vlc
(sec-vlcopt_support.diff).
- Fix stack-based buffer overflow in subtitle parsing
(sec-subtitle_buffer_overflow.diff).
- Fix NULL pointer dereference in the rtsp/rtp module by checking return
of the httpd_MsgGet function (sec-rtsp_remote_dos.diff).
Files:
c16b380dbe38a294c9ac30cd600c817e 2715 graphics optional vlc_0.8.6.c-4.1.dsc
62ee59bd4d5177cefa3fa2bac26d1862 37190 graphics optional
vlc_0.8.6.c-4.1.diff.gz
612091db15f3f1591c65eb686661478c 796 graphics optional
vlc-plugin-alsa_0.8.6.c-4.1_all.deb
7df04f80118287d0652cfc3e356ee50a 792 graphics optional
wxvlc_0.8.6.c-4.1_all.deb
3dea20d4cc93be6c2ca0216b28b53007 1147258 graphics optional
vlc_0.8.6.c-4.1_i386.deb
26ddc8e7e124cf95934e29e36fc711c3 4704844 net optional
vlc-nox_0.8.6.c-4.1_i386.deb
33fe6db53726d40f2a0d757665836a55 466188 libs optional
libvlc0_0.8.6.c-4.1_i386.deb
d662a2c15453e9727300fe5e41dd4e65 510656 libdevel optional
libvlc0-dev_0.8.6.c-4.1_i386.deb
cba0f0620ded0802d0ff827d4be344f5 4818 graphics optional
vlc-plugin-esd_0.8.6.c-4.1_i386.deb
197230204dd7e1429eda74a38cb216a0 10884 graphics optional
vlc-plugin-sdl_0.8.6.c-4.1_i386.deb
e23e5ebbd0749d87df796eddcf6d9aae 5936 graphics optional
vlc-plugin-ggi_0.8.6.c-4.1_i386.deb
c1e0a991ce6d6d48c6562bccdd645360 4192 graphics optional
vlc-plugin-glide_0.8.6.c-4.1_i386.deb
935554fef0f34754614c98e0240fee66 4074 graphics optional
vlc-plugin-arts_0.8.6.c-4.1_i386.deb
d24ad9408b9936831b2127ebd578d517 37788 graphics optional
mozilla-plugin-vlc_0.8.6.c-4.1_i386.deb
5e3d4b12ef84fa1273fc1252aa399c5c 4530 graphics optional
vlc-plugin-svgalib_0.8.6.c-4.1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHh4vmHYflSXNkfP8RAu59AJwPDzsTB5Zne8tuNVDH5dwGyCp7fwCdESVH
8h6WWhDcuKvijGYDoUiVpRs=
=M2sV
-----END PGP SIGNATURE-----
Accepted:
libvlc0-dev_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/libvlc0-dev_0.8.6.c-4.1_i386.deb
libvlc0_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/libvlc0_0.8.6.c-4.1_i386.deb
mozilla-plugin-vlc_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/mozilla-plugin-vlc_0.8.6.c-4.1_i386.deb
vlc-nox_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-nox_0.8.6.c-4.1_i386.deb
vlc-plugin-alsa_0.8.6.c-4.1_all.deb
to pool/main/v/vlc/vlc-plugin-alsa_0.8.6.c-4.1_all.deb
vlc-plugin-arts_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-arts_0.8.6.c-4.1_i386.deb
vlc-plugin-esd_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-esd_0.8.6.c-4.1_i386.deb
vlc-plugin-ggi_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-ggi_0.8.6.c-4.1_i386.deb
vlc-plugin-glide_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-glide_0.8.6.c-4.1_i386.deb
vlc-plugin-sdl_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-sdl_0.8.6.c-4.1_i386.deb
vlc-plugin-svgalib_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc-plugin-svgalib_0.8.6.c-4.1_i386.deb
vlc_0.8.6.c-4.1.diff.gz
to pool/main/v/vlc/vlc_0.8.6.c-4.1.diff.gz
vlc_0.8.6.c-4.1.dsc
to pool/main/v/vlc/vlc_0.8.6.c-4.1.dsc
vlc_0.8.6.c-4.1_i386.deb
to pool/main/v/vlc/vlc_0.8.6.c-4.1_i386.deb
wxvlc_0.8.6.c-4.1_all.deb
to pool/main/v/vlc/wxvlc_0.8.6.c-4.1_all.deb
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
