[Bug 1703754] [NEW] Force sync vlc 2.2.6-3 from Debian Sid

Launchpad Bug Tracker 1703754 at bugs.launchpad.net
Wed Jul 12 06:30:36 UTC 2017


You have been subscribed to a public bug by Simon Quigley (tsimonq2):

Please force sync vlc 2.2.6-3 from Debian Sid.

The delta exists in the first place (created by me) to fix
CVE-2017-10699, which was fixed in 2.2.6-3. Here's the full changelog:

 vlc (2.2.6-3) unstable; urgency=medium

   [ Mateusz Łukasik ]
   * debian/patches: avcodec: Check visible sizes (CVE-2017-10699).

   [ Sebastian Ramacher ]
   * debian/patches: flac: Fix heap write overflow on frame format change.
     (CVE-2017-9300)

The delta does not need to exist any more, so it can be force synced.

** Affects: vlc (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Force sync vlc 2.2.6-3 from Debian Sid
https://bugs.launchpad.net/bugs/1703754
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list