585642 – media-video/vlc-2.2.4 version bump please

Bug 585642 - media-video/vlc-2.2.4 version bump please

Summary: media-video/vlc-2.2.4 version bump please

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal major (vote)
Assignee:	Nick Andrade

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	CVE-2016-5108
	Show dependency tree

Reported:	2016-06-11 23:04 UTC by Ulenrich
Modified:	2016-07-21 09:44 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Ulenrich 2016-06-11 23:04:28 UTC

NEWS file statements (last seems security related):

Changes between 2.2.3 and 2.2.4:
--------------------------------
Decoder:
 * Fix crash in G.711 wav files
 * Fix mp3 crash in libmad
 * Fix out-of-bound write in adpcm QT IMA codec (CVE-2016-5108)

Comment 1 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2016-07-21 09:44:53 UTC

commit b377f4670e49e9fb8d6cab970e35672825eddcee
Author: Lars Wendler <polynomial-c@gentoo.org>
Date:   Thu Jul 21 11:29:20 2016

    media-video/vlc: Security bump to version 2.2.4
    
    Bugs #584510 and #585642
    
    Package-Manager: portage-2.3.0
    Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>