vlc: security bump to version 2.1.6

* Fix heap overflow in decomp stream filter
* Fix buffer overflow in updater
* Fix potential buffer overflow in schroedinger encoder
* Fix null-pointer dereference in DMO decoder
* Fix buffer overflow in parsing of string boxes in mp4 demuxer
* Fix SRTP integer overflow
* Fix potential crash in zip access
* Fix read overflow in Ogg demuxer

And also add hash file.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Gustavo Zacarias 2015-02-27 12:51:58 -03:00 committed by Peter Korsgaard
parent fb56d37163
commit 9d13019edd
2 changed files with 3 additions and 1 deletions

2
package/vlc/vlc.hash Normal file
View file

@ -0,0 +1,2 @@
# From http://get.videolan.org/vlc/2.1.6/vlc-2.1.6.tar.xz.sha256
sha256 1b76cf4b96e18cf224d21b91343f7e579790c5d3e499c8a230f53da695687c04 vlc-2.1.6.tar.xz

View file

@ -4,7 +4,7 @@
#
################################################################################
VLC_VERSION = 2.1.5
VLC_VERSION = 2.1.6
VLC_SITE = http://get.videolan.org/vlc/$(VLC_VERSION)
VLC_SOURCE = vlc-$(VLC_VERSION).tar.xz
VLC_LICENSE = GPLv2+ LGPLv2.1+