Launchpad has imported 2 comments from the remote bug at
https://bugs.gentoo.org/show_bug.cgi?id=424435.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2012-07-01T18:58:05+00:00 Aballier wrote:

Not much more information besides vlc-2.0.2 NEWS file:
Security:
 * Fix Ogg Heap buffer overflow

and this commit:
http://git.videolan.org/gitweb.cgi/vlc/vlc-2.0.git/?a=commit;h=16e9e126333fb7acb47d363366fee3deadc8331e


2.0.2 should be safe to stabilise though.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1020403/comments/0

------------------------------------------------------------------------
On 2012-07-01T21:28:20+00:00 J-ago wrote:

ok to proceed with stabilization?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1020403/comments/1


** Changed in: gentoo
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1020403

Title:
  <vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1020403/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to