[ubuntu/lucid-security] vlc_1.0.6-1ubuntu1.4_i386_translations.tar.gz, vlc_1.0.6-1ubuntu1.4_amd64_translations.tar.gz, vlc, vlc_1.0.6-1ubuntu1.4_powerpc_translations.tar.gz, vlc_1.0.6-1ubuntu1.4_armel_translations.tar.gz, vlc_1.0.6-1ubuntu1.4_ia64_translations.tar.gz, vlc_1.0.6-1ubuntu1.4_sparc_translations.tar.gz (delayed) 1.0.6-1ubuntu1.4 (Accepted)

[Ubuntu Installer]

vlc (1.0.6-1ubuntu1.4) lucid-security; urgency=low

  * SECURITY UPDATE: heap overflow in CDG decoder (LP: #707154)
    - debian/patches/cdg-heap-overflow.diff: Fix heap overflow in CDG
      decoder, thanks to Dan Rosenberg
  * SECURITY UPDATE: heap corruption in some XML based subtitles decoder
    - debian/patches/xml-heap-corruption.diff: Handle early termination
      properly in StripTags, thanks to Harry Sintonen

Date: Mon, 24 Jan 2011 22:59:31 +0100
Changed-By: Benjamin Drung <bdrung at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/vlc/1.0.6-1ubuntu1.4
-------------- next part --------------
Format: 1.8
Date: Mon, 24 Jan 2011 22:59:31 +0100
Source: vlc
Binary: vlc vlc-dbg vlc-nox libvlccore2 libvlc2 libvlccore-dev libvlc-dev vlc-plugin-sdl vlc-plugin-ggi mozilla-plugin-vlc vlc-plugin-svgalib vlc-plugin-jack vlc-plugin-pulse vlc-plugin-svg vlc-data
Architecture: source
Version: 1.0.6-1ubuntu1.4
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Benjamin Drung <bdrung at ubuntu.com>
Description: 
 libvlc-dev - development files for libvlc
 libvlc2    - multimedia player and streamer library
 libvlccore-dev - development files for libvlccore
 libvlccore2 - base library for VLC and its modules
 mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
 vlc        - multimedia player and streamer
 vlc-data   - Common data for VLC
 vlc-dbg    - debugging symbols for vlc
 vlc-nox    - multimedia player and streamer (without X support)
 vlc-plugin-ggi - GGI video output plugin for VLC
 vlc-plugin-jack - Jack audio plugins for VLC
 vlc-plugin-pulse - PulseAudio plugin for VLC
 vlc-plugin-sdl - SDL video and audio output plugin for VLC
 vlc-plugin-svg - SVG plugin for VLC
 vlc-plugin-svgalib - SVGAlib video output plugin for VLC
Launchpad-Bugs-Fixed: 707154
Changes: 
 vlc (1.0.6-1ubuntu1.4) lucid-security; urgency=low
 .
   * SECURITY UPDATE: heap overflow in CDG decoder (LP: #707154)
     - debian/patches/cdg-heap-overflow.diff: Fix heap overflow in CDG
       decoder, thanks to Dan Rosenberg
   * SECURITY UPDATE: heap corruption in some XML based subtitles decoder
     - debian/patches/xml-heap-corruption.diff: Handle early termination
       properly in StripTags, thanks to Harry Sintonen
Checksums-Sha1: 
 cf24679f5180b8c02d71a02badc5d368475db98e 4008 vlc_1.0.6-1ubuntu1.4.dsc
 d041e43aef51b3275a4cece4a939da457aaf31a5 74829 vlc_1.0.6-1ubuntu1.4.diff.gz
Checksums-Sha256: 
 3e3314fd557e1f3c1791122946fd1f2fda4736a8ff3abc819079c6af80711a9e 4008 vlc_1.0.6-1ubuntu1.4.dsc
 6410d8f739af239b4df53bac37cc24a2b090e09facf643d6fc2ac75def629282 74829 vlc_1.0.6-1ubuntu1.4.diff.gz
Files: 
 e4caa40c21ba9be453a9e350a74cacb7 4008 video optional vlc_1.0.6-1ubuntu1.4.dsc
 a3a70ef2d93eb08b2046e79324401ed8 74829 video optional vlc_1.0.6-1ubuntu1.4.diff.gz
Original-Maintainer: Debian multimedia packages maintainers <pkg-multimedia-maintainers at lists.alioth.debian.org>