~ubuntu-branches/ubuntu/precise/vlc/precise-proposed

Viewing all changes in revision 115.

  • Committer: Package Import Robot
  • Author(s): Benjamin Drung
  • Date: 2012-07-24 00:44:39 UTC
  • mfrom: (1.4.4) (3.5.43 sid)
  • Revision ID: package-import@ubuntu.com-20120724004439-xjjt4fdv8fgqe0n4
Tags: 2.0.3-0ubuntu0.12.04.1
* New bug-fixing upstream release (LP: #1025713).
* SECURITY UPDATE: Heap-based buffer overflow in the Ogg_DecodePacket function
  in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before
  2.0.2 allows remote attackers to cause a denial of service (application
  crash) and possibly execute arbitrary code via a crafted OGG file.
  - CVE-2012-3377

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: