oss-security - Re: CVE request: vlc

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 8 Jun 2011 15:46:57 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: vlc



----- Original Message -----
> From http://www.videolan.org/vlc/releases/1.1.10.html :
> 
> "Security update regarding an integer overflow in xspf demuxer"
> 
> Looks like it's the following commit:
> 
> http://repo.or.cz/w/vlc.git/commitdiff/cd929923ff49175a501bb3e9553a683bc42ff61c
> 
> 

Please use CVE-2011-2194.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.