[Bug 1703754] [NEW] Force sync vlc 2.2.6-3 from Debian Sid
Launchpad Bug Tracker
1703754 at bugs.launchpad.net
Wed Jul 12 06:30:36 UTC 2017
You have been subscribed to a public bug by Simon Quigley (tsimonq2):
Please force sync vlc 2.2.6-3 from Debian Sid.
The delta exists in the first place (created by me) to fix
CVE-2017-10699, which was fixed in 2.2.6-3. Here's the full changelog:
vlc (2.2.6-3) unstable; urgency=medium
[ Mateusz Łukasik ]
* debian/patches: avcodec: Check visible sizes (CVE-2017-10699).
[ Sebastian Ramacher ]
* debian/patches: flac: Fix heap write overflow on frame format change.
(CVE-2017-9300)
The delta does not need to exist any more, so it can be force synced.
** Affects: vlc (Ubuntu)
Importance: Undecided
Status: New
--
Force sync vlc 2.2.6-3 from Debian Sid
https://bugs.launchpad.net/bugs/1703754
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.
More information about the Ubuntu-sponsors
mailing list