* [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9
@ 2019-08-21 18:07 Bernd Kuhls
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Bernd Kuhls @ 2019-08-21 18:07 UTC (permalink / raw)
To: buildroot
Needed for security bump of vlc to 3.0.8:
http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commitdiff;h=48f014768dc22ecad23d0e9f53c38805a3aff832
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
package/libmodplug/libmodplug.hash | 2 +-
package/libmodplug/libmodplug.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/libmodplug/libmodplug.hash b/package/libmodplug/libmodplug.hash
index d50a56eeda..e75152e27f 100644
--- a/package/libmodplug/libmodplug.hash
+++ b/package/libmodplug/libmodplug.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 77462d12ee99476c8645cb5511363e3906b88b33a6b54362b4dbc0f39aa2daad libmodplug-0.8.8.5.tar.gz
+sha256 457ca5a6c179656d66c01505c0d95fafaead4329b9dbaa0f997d00a3508ad9de libmodplug-0.8.9.0.tar.gz
sha256 49942e7b3b175f549e751feb08b5270ca6f6c5fb7a1be9f9517db275ec32c92e COPYING
diff --git a/package/libmodplug/libmodplug.mk b/package/libmodplug/libmodplug.mk
index d9d74df50c..05786ce812 100644
--- a/package/libmodplug/libmodplug.mk
+++ b/package/libmodplug/libmodplug.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBMODPLUG_VERSION = 0.8.8.5
+LIBMODPLUG_VERSION = 0.8.9.0
LIBMODPLUG_SITE = http://downloads.sourceforge.net/project/modplug-xmms/libmodplug/$(LIBMODPLUG_VERSION)
LIBMODPLUG_INSTALL_STAGING = YES
LIBMODPLUG_LICENSE = Public Domain
--
2.20.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8
2019-08-21 18:07 [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Bernd Kuhls
@ 2019-08-21 18:07 ` Bernd Kuhls
2019-08-25 6:51 ` Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
2019-08-25 6:51 ` [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
2 siblings, 2 replies; 6+ messages in thread
From: Bernd Kuhls @ 2019-08-21 18:07 UTC (permalink / raw)
To: buildroot
Release notes: https://www.videolan.org/developers/vlc-branch/NEWS
Fixes the following security bugs:
* Fix a buffer overflow in the MKV demuxer (CVE-2019-14970)
* Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962)
* Fix a read buffer overflow in the FAAD decoder
* Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438)
* Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776)
* Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778)
* Fix a use after free in the ASF demuxer (CVE-2019-14533)
* Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602)
* Fix a null dereference in the dvdnav demuxer
* Fix a null dereference in the ASF demuxer (CVE-2019-14534)
* Fix a null dereference in the AVI demuxer
* Fix a division by zero in the CAF demuxer (CVE-2019-14498)
* Fix a division by zero in the ASF demuxer (CVE-2019-14535)
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
package/vlc/vlc.hash | 12 ++++++------
package/vlc/vlc.mk | 2 +-
2 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/package/vlc/vlc.hash b/package/vlc/vlc.hash
index ba053ea963..d1d3e45b0c 100644
--- a/package/vlc/vlc.hash
+++ b/package/vlc/vlc.hash
@@ -1,9 +1,9 @@
-# From http://download.videolan.org/pub/videolan/vlc/3.0.7.1/vlc-3.0.7.1.tar.xz.sha256
-sha256 0655804371096772f06104b75c21cde8a76e3b6c8a2fdadc97914f082c6264f5 vlc-3.0.7.1.tar.xz
-# From http://download.videolan.org/pub/videolan/vlc/3.0.7.1/vlc-3.0.7.1.tar.xz.sha1
-sha1 3f6f9e56695eeea662b86602963721f1ac7afd23 vlc-3.0.7.1.tar.xz
-# From http://download.videolan.org/pub/videolan/vlc/3.0.7.1/vlc-3.0.7.1.tar.xz.md5
-md5 1adf2fe21070378b0e45ad163d3b232d vlc-3.0.7.1.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/3.0.8/vlc-3.0.8.tar.xz.sha256
+sha256 e0149ef4a20a19b9ecd87309c2d27787ee3f47dfd47c6639644bc1f6fd95bdf6 vlc-3.0.8.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/3.0.8/vlc-3.0.8.tar.xz.sha1
+sha1 424a9795e051c198e7fa28107b15809ee6820d43 vlc-3.0.8.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/3.0.8/vlc-3.0.8.tar.xz.md5
+md5 744442ec0c145453ea1d257914c8072e vlc-3.0.8.tar.xz
# Locally computed
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING.LIB
diff --git a/package/vlc/vlc.mk b/package/vlc/vlc.mk
index a736643159..ae12e89b8a 100644
--- a/package/vlc/vlc.mk
+++ b/package/vlc/vlc.mk
@@ -4,7 +4,7 @@
#
################################################################################
-VLC_VERSION = 3.0.7.1
+VLC_VERSION = 3.0.8
VLC_SITE = https://get.videolan.org/vlc/$(VLC_VERSION)
VLC_SOURCE = vlc-$(VLC_VERSION).tar.xz
VLC_LICENSE = GPL-2.0+, LGPL-2.1+
--
2.20.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9
2019-08-21 18:07 [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Bernd Kuhls
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
@ 2019-08-25 6:51 ` Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2019-08-25 6:51 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Needed for security bump of vlc to 3.0.8:
> http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commitdiff;h=48f014768dc22ecad23d0e9f53c38805a3aff832
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
@ 2019-08-25 6:51 ` Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
1 sibling, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2019-08-25 6:51 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Release notes: https://www.videolan.org/developers/vlc-branch/NEWS
> Fixes the following security bugs:
> * Fix a buffer overflow in the MKV demuxer (CVE-2019-14970)
> * Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962)
> * Fix a read buffer overflow in the FAAD decoder
> * Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438)
> * Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776)
> * Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778)
> * Fix a use after free in the ASF demuxer (CVE-2019-14533)
> * Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602)
> * Fix a null dereference in the dvdnav demuxer
> * Fix a null dereference in the ASF demuxer (CVE-2019-14534)
> * Fix a null dereference in the AVI demuxer
> * Fix a division by zero in the CAF demuxer (CVE-2019-14498)
> * Fix a division by zero in the ASF demuxer (CVE-2019-14535)
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9
2019-08-21 18:07 [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Bernd Kuhls
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
2019-08-25 6:51 ` [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Peter Korsgaard
@ 2019-09-02 15:55 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2019-09-02 15:55 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Needed for security bump of vlc to 3.0.8:
> http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commitdiff;h=48f014768dc22ecad23d0e9f53c38805a3aff832
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed to 2019.02.x and 2019.05.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
2019-08-25 6:51 ` Peter Korsgaard
@ 2019-09-02 15:55 ` Peter Korsgaard
1 sibling, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2019-09-02 15:55 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Release notes: https://www.videolan.org/developers/vlc-branch/NEWS
> Fixes the following security bugs:
> * Fix a buffer overflow in the MKV demuxer (CVE-2019-14970)
> * Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962)
> * Fix a read buffer overflow in the FAAD decoder
> * Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438)
> * Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776)
> * Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778)
> * Fix a use after free in the ASF demuxer (CVE-2019-14533)
> * Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602)
> * Fix a null dereference in the dvdnav demuxer
> * Fix a null dereference in the ASF demuxer (CVE-2019-14534)
> * Fix a null dereference in the AVI demuxer
> * Fix a division by zero in the CAF demuxer (CVE-2019-14498)
> * Fix a division by zero in the ASF demuxer (CVE-2019-14535)
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed to 2019.02.x and 2019.05.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2019-09-02 15:55 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-08-21 18:07 [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Bernd Kuhls
2019-08-21 18:07 ` [Buildroot] [PATCH 2/2] package/vlc: security bump version to 3.0.8 Bernd Kuhls
2019-08-25 6:51 ` Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
2019-08-25 6:51 ` [Buildroot] [PATCH 1/2] package/libmodplug: bump version to 0.8.9 Peter Korsgaard
2019-09-02 15:55 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.