From: Gustavo Zacarias Date: Fri, 27 Feb 2015 15:51:58 +0000 (-0300) Subject: vlc: security bump to version 2.1.6 X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=9d13019edd0dd2f2c3c72adc61316f3621b9d831;p=buildroot.git vlc: security bump to version 2.1.6 * Fix heap overflow in decomp stream filter * Fix buffer overflow in updater * Fix potential buffer overflow in schroedinger encoder * Fix null-pointer dereference in DMO decoder * Fix buffer overflow in parsing of string boxes in mp4 demuxer * Fix SRTP integer overflow * Fix potential crash in zip access * Fix read overflow in Ogg demuxer And also add hash file. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard --- diff --git a/package/vlc/vlc.hash b/package/vlc/vlc.hash new file mode 100644 index 0000000000..718a0e6cda --- /dev/null +++ b/package/vlc/vlc.hash @@ -0,0 +1,2 @@ +# From http://get.videolan.org/vlc/2.1.6/vlc-2.1.6.tar.xz.sha256 +sha256 1b76cf4b96e18cf224d21b91343f7e579790c5d3e499c8a230f53da695687c04 vlc-2.1.6.tar.xz diff --git a/package/vlc/vlc.mk b/package/vlc/vlc.mk index 9d99de636f..56006b5b46 100644 --- a/package/vlc/vlc.mk +++ b/package/vlc/vlc.mk @@ -4,7 +4,7 @@ # ################################################################################ -VLC_VERSION = 2.1.5 +VLC_VERSION = 2.1.6 VLC_SITE = http://get.videolan.org/vlc/$(VLC_VERSION) VLC_SOURCE = vlc-$(VLC_VERSION).tar.xz VLC_LICENSE = GPLv2+ LGPLv2.1+