oss-security - CVE request: vlc

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 07 Jun 2011 10:37:19 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: vlc

>From http://www.videolan.org/vlc/releases/1.1.10.html :

"Security update regarding an integer overflow in xspf demuxer"

Looks like it's the following commit:

http://repo.or.cz/w/vlc.git/commitdiff/cd929923ff49175a501bb3e9553a683bc42ff61c


Thanks,

Marc.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.