kumquat-buildroot/package/vlc
Fabrice Fontaine d675873f4f package/vlc: security bump to version 3.0.20
Fix CVE-2023-47359: Videolan VLC prior to version 3.0.20 contains an
incorrect offset read that leads to a Heap-Based Buffer Overflow in
function GetPacket() and results in a memory corruption.

Fix CVE-2023-47360: Videolan VLC prior to version 3.0.20 contains an
Integer underflow that leads to an incorrect packet length.

https://code.videolan.org/videolan/vlc/-/blob/3.0.20/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-11-28 21:49:49 +01:00
..
0001-Disable-building-of-statically-linked-vlc-binary.patch
0002-automake-add-subdir-objects-option.patch
0003-build-use-pkg-config-to-get-tremor-libs.patch
0004-Fix-build-error-using-uClibc-by-adding-sys-types.h.patch
0005-Don-t-assume-strerror_l-is-available.patch
0006-posix-remove-ancient-run-time-fallback-to-real-time-.patch
0007-Add-support-for-freerdp2.patch
0008-configure.ac-also-use-AC_PATH_PROG-to-check-for-wayl.patch
0009-modules-video_filter-opencv_example.cpp-fix-build-wi.patch
0010-opengl-missing-library-check.patch
Config.in
vlc.hash
vlc.mk