![Mahyar Koshkouei](/assets/img/avatar_default.png)
Fixes CVE-2018-6360: mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist. [Peter: Add CVE description] Signed-off-by: Mahyar Koshkouei <mahyar.koshkouei@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 lines
108 B
Plaintext
3 lines
108 B
Plaintext
# Locally calculated
|
|
sha256 2ad104d83fd3b2b9457716615acad57e479fd1537b8fc5e37bfe9065359b50be v0.27.2.tar.gz
|