Date: Sun, 28 May 2017 07:10:55 +0000 (UTC) From: Thomas Zander <riggs@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r441896 - branches/2017Q2/multimedia/vlc Message-ID: <201705280710.v4S7AtPJ057507@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: riggs Date: Sun May 28 07:10:55 2017 New Revision: 441896 URL: https://svnweb.freebsd.org/changeset/ports/441896 Log: MFH: r441756 Update to upstream version 2.2.6 Details: This is a bugfix release for the recently discovered subtitle remote vulnerability, see http://blog.checkpoint.com/2017/05/23/hacked-in-translation/ In addition to the statements in this blog post, the VLC devs added bounds checks and string termination in multiple places in the subtitle demuxer. It is hence possible that, contrary to the blog post, this issue was not fixed completely in version 2.2.5.1 Approved by: portmgr (miwi) Modified: branches/2017Q2/multimedia/vlc/Makefile branches/2017Q2/multimedia/vlc/distinfo Directory Properties: branches/2017Q2/ (props changed) Modified: branches/2017Q2/multimedia/vlc/Makefile ============================================================================== --- branches/2017Q2/multimedia/vlc/Makefile Sun May 28 03:53:36 2017 (r441895) +++ branches/2017Q2/multimedia/vlc/Makefile Sun May 28 07:10:55 2017 (r441896) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= vlc -DISTVERSION= 2.2.5.1 +DISTVERSION= 2.2.6 PORTEPOCH= 4 CATEGORIES= multimedia audio ipv6 net www MASTER_SITES= http://download.videolan.org/pub/videolan/${PORTNAME}/${DISTVERSION:S/a$//}/ \ Modified: branches/2017Q2/multimedia/vlc/distinfo ============================================================================== --- branches/2017Q2/multimedia/vlc/distinfo Sun May 28 03:53:36 2017 (r441895) +++ branches/2017Q2/multimedia/vlc/distinfo Sun May 28 07:10:55 2017 (r441896) @@ -1,3 +1,3 @@ -TIMESTAMP = 1494659367 -SHA256 (vlc-2.2.5.1.tar.xz) = b28b8a28f578c0c6cb1ebed293aca2a3cd368906cf777d1ab599e2784ddda1cc -SIZE (vlc-2.2.5.1.tar.xz) = 21946020 +TIMESTAMP = 1495777516 +SHA256 (vlc-2.2.6.tar.xz) = c403d3accd9a400eb2181c958f3e7bc5524fe5738425f4253d42883b425a42a8 +SIZE (vlc-2.2.6.tar.xz) = 22198720
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201705280710.v4S7AtPJ057507>