Page MenuHomeSolus

Update vlc to 2.2.8 to address CVE-2017-10699
ClosedPublic

Authored by kyrios123 on Nov 22 2017, 10:25 AM.

Details

Summary
  • Fix flac heap write overflow on format change
  • Fix crash in libavcodec module (heap write out-of band) (CVE-2017-10699)
  • Fix infinite loop in sami subtitle
  • Fix AAC 7.1 channels detection

Demuxers

  • Fix potential crash in ASX parser
  • Fix AVI read/write overflow

Video Output:

  • Fix Direct3D9 output with odd offsets

Misc

  • Fix crash in MTP
  • Support libupnp 1.8
  • Translations updates

Closes T5099

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

Play a couple of .avi and .ogg files

Diff Detail

Repository
R3140 vlc
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

Again, please list why you removed builddeps. If you make a change in a package other than relno, version, please document why.

Looks to me like the deps were duped and implicit before and/or lacking pkgconfig names. I see no issue with the patch

If the boss man says it's good, it's gud!

This revision is now accepted and ready to land.Nov 23 2017, 12:34 AM
This revision was automatically updated to reflect the committed changes.