Public bug reported:
Please force sync vlc 2.2.6-3 from Debian Sid.
The delta exists in the first place (created by me) to fix
CVE-2017-10699, which was fixed in 2.2.6-3. Here's the full changelog:
vlc (2.2.6-3) unstable; urgency=medium
[ Mateusz Ĺukasik ]
* debian/patches: avcodec: Check visible sizes (CVE-2017-10699).
[ Sebastian Ramacher ]
* debian/patches: flac: Fix heap write overflow on frame format change.
(CVE-2017-9300)
The delta does not need to exist any more, so it can be force synced.
** Affects: vlc (Ubuntu)
Importance: Undecided
Assignee: Simon Quigley (tsimonq2)
Status: New
** Tags: artful
** Tags added: artful
** Changed in: vlc (Ubuntu)
Assignee: (unassigned) => Simon Quigley (tsimonq2)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1703754
Title:
Force sync vlc 2.2.6-3 from Debian Sid
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1703754/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs