ALT Linux Community general discussions
 help / color / mirror / Atom feed
* [Comm] I: vlc-0.8.6d-alt4.M40.1
@ 2007-12-27 14:08 Michael Shigorin
  2007-12-28 12:26 ` Olvin
  0 siblings, 1 reply; 11+ messages in thread
From: Michael Shigorin @ 2007-12-27 14:08 UTC (permalink / raw)
  To: community; +Cc: thresh, security-team

[-- Attachment #1: Type: text/plain, Size: 1308 bytes --]

	Здравствуйте.
В updates/4.0 отправлена сборка vlc, исправляющая две
обнаруженные проблемы, позволяющие при некоторых условиях
организовать исполнение произвольного кода:

http://secunia.com/advisories/28233/

С ней есть такой нюанс: изменились зависимости vlc, который
теперь также требует vlc-plugin-v4l; это приводит к невозможности
обновления путём apt-get upgrade или rpm -Fvh *vlc*0.8.6d-alt4.M40*

Рекомендуется обновление путём apt-get dist-upgrade (я лично
всегда так и делаю) или на крайний случай -- apt-get remove libvlc;
apt-get install vlc

Изменения:

---
* Thu Dec 27 2007 Michael Shigorin <mike@altlinux> 0.8.6d-alt4.M40.1
- security update built for M40
- minimal required dirac version rolled back to 0.6.0,
  built against 0.7.0 (thanks thresh@ for commit id to revert)

* Wed Dec 26 2007 Michael Shigorin <mike@altlinux> 0.8.6d-alt5
- NMU: major security fixes:
  + changeset 23854: fix for a format string error
    in the web interface
  + changeset 23855: fixes for boundary errors in the
    "ParseMicroDvd()", "ParseSSA()", and "ParseVplayer()"
    functions
  + for details see http://secunia.com/advisories/28233/
    (CVE-2007-unknown-yet)
---

-- 
 ---- WBR, Michael Shigorin <mike@altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

^ permalink raw reply	[flat|nested] 11+ messages in thread

end of thread, other threads:[~2008-01-04 12:14 UTC | newest]

Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2007-12-27 14:08 [Comm] I: vlc-0.8.6d-alt4.M40.1 Michael Shigorin
2007-12-28 12:26 ` Olvin
2007-12-28 19:11   ` Pavlov Konstantin
2007-12-31  9:56     ` Michael Shigorin
2007-12-31 15:53       ` Olvin
2007-12-31 18:12         ` Pavlov Konstantin
2008-01-03 19:12           ` Olvin
2008-01-04 12:14             ` Pavlov Konstantin
2007-12-31 19:25         ` Michael Shigorin
2008-01-03 19:17           ` Olvin
2007-12-28 20:43   ` Michael Shigorin

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git