-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Jun 2016 17:39:38 +0200 Source: vlc Binary: libvlc-dev libvlc5 libvlccore-dev libvlccore8 vlc vlc-data vlc-dbg vlc-nox vlc-plugin-fluidsynth vlc-plugin-jack vlc-plugin-notify vlc-plugin-sdl vlc-plugin-svg vlc-plugin-zvbi vlc-plugin-samba vlc-plugin-pulse Architecture: i386 Version: 2.2.4-1~deb8u1 Distribution: jessie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Sebastian Ramacher Description: libvlc-dev - development files for libvlc libvlc5 - multimedia player and streamer library libvlccore-dev - development files for libvlccore libvlccore8 - base library for VLC and its modules vlc - multimedia player and streamer vlc-data - Common data for VLC vlc-dbg - debugging symbols for vlc vlc-nox - multimedia player and streamer (without X support) vlc-plugin-fluidsynth - FluidSynth plugin for VLC vlc-plugin-jack - Jack audio plugins for VLC vlc-plugin-notify - LibNotify plugin for VLC vlc-plugin-pulse - transitional dummy package for vlc vlc-plugin-samba - Samba plugin for VLC vlc-plugin-sdl - SDL video and audio output plugin for VLC vlc-plugin-svg - SVG plugin for VLC vlc-plugin-zvbi - VBI teletext plugin for VLC Closes: 782229 784640 801448 825728 Changes: vlc (2.2.4-1~deb8u1) jessie-security; urgency=medium . * New upstream release. - quicktime: Reject invalid IMA files (CVE-2016-5108). (Closes: #825728) - pulse: Compute latency correctly if negative, fixing missing audio on high network latency. (Closes: #784640) - alsa: Fix audio device selection. (Closes: #801448) - hls: Fix hang on stop, crashes and stack overflow. - mkv: Fix infinite loop. - vpx: Fix crash. - mxf: Fix crash on stop. - adpcm: Fix double-free. - zvbi: Fix crash. - skins2: Fix crash on malformed skin bitmaps. - swscale: Fix crashes in swscale resizing. - mp4: Fix divide-by-zero crash in mux. - rtsp: Fix off-by-one buffer overflow. - mms: Fix segmentation fault on large allocation, fix overflows. - lua: Fix use-after-free. - httplive: Fix stack overflow. - avformat: Fix heap overflow, NULL dereference and double-free. - avcodec: Fix invalid free. - sdp: Fix read overflow. - vcd: Fix double-free. - aout: Fix use-after-free. - vout: Fix use-after-free. - realrtsp: Fix off-by-one and various crashes. - Fix various memory leaks. - Fix links to French TV icons. (Closes: #782229) * debian/patches/CVE-2015-5949.patch: Removed, included upstream. * debian/copyright: Update copyright years. * debian/libvlc5.symbols: Bump version of libvlc_event_type_name for new event names. Checksums-Sha1: ec1eedae8cb5cd2b88e914b39e398fe961afd8f1 26672 libvlc-dev_2.2.4-1~deb8u1_i386.deb cb9c0943efc96eed00132025cc8effdf17e46749 53402 libvlc5_2.2.4-1~deb8u1_i386.deb 2b4a27d29135d0d7b85dee0af6b04f68b520a441 117688 libvlccore-dev_2.2.4-1~deb8u1_i386.deb 5bfb44b06e6ac03a6c9fcd9fccdb01aef84939db 414580 libvlccore8_2.2.4-1~deb8u1_i386.deb 65c85fbcea124bb8883764ccd8f7d100106c40df 1469254 vlc_2.2.4-1~deb8u1_i386.deb 2e92ddbd1bfc6436edbb69dbc9110eacd3529d45 22294718 vlc-dbg_2.2.4-1~deb8u1_i386.deb a94ec1aaf352528621c8e57eab3f3cdcac1ffd63 2492286 vlc-nox_2.2.4-1~deb8u1_i386.deb 62f9b5a98718fa5501d0eee2f9e826efb6bfbdec 6458 vlc-plugin-fluidsynth_2.2.4-1~deb8u1_i386.deb 2193af889d5475c08b3f06ab5b2091c902fc4a94 11910 vlc-plugin-jack_2.2.4-1~deb8u1_i386.deb dec43e1499a53f12af87317cd9400bc84d2a5865 5872 vlc-plugin-notify_2.2.4-1~deb8u1_i386.deb 52eeebad7e270755214910f7c50c839ae2d304e3 8252 vlc-plugin-sdl_2.2.4-1~deb8u1_i386.deb 149d246b844ed37195a96e9439d162a446b5f89b 6522 vlc-plugin-svg_2.2.4-1~deb8u1_i386.deb bdb38ad6d889fba7f448c39fdb1471be2488eb2e 11330 vlc-plugin-zvbi_2.2.4-1~deb8u1_i386.deb ef8c7ac3a94598aaec4055efcfd2794a6d424e6c 5300 vlc-plugin-samba_2.2.4-1~deb8u1_i386.deb Checksums-Sha256: 896bf1f392e29f424bf393b3120864b239c8915f240e2c9c8e063b38ec5b9598 26672 libvlc-dev_2.2.4-1~deb8u1_i386.deb 828879cbf3908044998cdb565b7c957cd1a9a6727616d0bc275cc301e23a3e96 53402 libvlc5_2.2.4-1~deb8u1_i386.deb 4bd47c34e0c9853c08ac1069ac369e333e161fab83157a60baf54b91aa9aea06 117688 libvlccore-dev_2.2.4-1~deb8u1_i386.deb 59c2e472d756713d1fcf63a77899af6f4b739e3ffa9e4014f652f80ddcddbfec 414580 libvlccore8_2.2.4-1~deb8u1_i386.deb fd52c118d513b886307b34d897b509704778077967abb7b487d632fdd13a8c19 1469254 vlc_2.2.4-1~deb8u1_i386.deb 8a1a659dab6c338ca30485dd1ea51b6f92d7eb1e028f1170cf5f3a8263be94fd 22294718 vlc-dbg_2.2.4-1~deb8u1_i386.deb 7857016d53f1ad2f2d4b1a57032e979012bd8b03be3cf18aa47ac4401791c2d7 2492286 vlc-nox_2.2.4-1~deb8u1_i386.deb 9c6331e4f846c5762f08ea516f6ad30707a26849c8e0a9cfe67475e7e974c23f 6458 vlc-plugin-fluidsynth_2.2.4-1~deb8u1_i386.deb 6e36b1f20070d90a99a26983f3f88ece79dba6d51a0f2acef8cb7f7a4898e2c7 11910 vlc-plugin-jack_2.2.4-1~deb8u1_i386.deb 85632a8f4e0a1a313fc16fc30c5429fe6916af12c21be953ffb86dab43a8b928 5872 vlc-plugin-notify_2.2.4-1~deb8u1_i386.deb db927b7a9ad0778f3f3b1f47cad761d2103762bc49198779c70992a38e556c18 8252 vlc-plugin-sdl_2.2.4-1~deb8u1_i386.deb 3f1411d3d0ce6da023310fb057043865dc0ab11231c263c4ba9f9eeaf9cf8bc8 6522 vlc-plugin-svg_2.2.4-1~deb8u1_i386.deb 8db4a67c6f7062fa0c12a34fa5db2c257681c7133f37f29cc16cf67a4f6e51b2 11330 vlc-plugin-zvbi_2.2.4-1~deb8u1_i386.deb 1b5305834462c89e5de7d9fc34b3ce2ba628dc1c198b2d57881b470320b60618 5300 vlc-plugin-samba_2.2.4-1~deb8u1_i386.deb Files: 50087d9bb7c26ac1a56d58c728af2488 26672 libdevel optional libvlc-dev_2.2.4-1~deb8u1_i386.deb 3bea67f5b63804f32bb028c14e8cbc26 53402 libs optional libvlc5_2.2.4-1~deb8u1_i386.deb b3790fcceb521e9d115cdf873b7ba17a 117688 libdevel optional libvlccore-dev_2.2.4-1~deb8u1_i386.deb e9cca4e907507ad57c65d925d24c1cee 414580 libs optional libvlccore8_2.2.4-1~deb8u1_i386.deb 11a8583455c24f1736e9c4adc957054a 1469254 video optional vlc_2.2.4-1~deb8u1_i386.deb 1370af752597dd008ee8399a528ab30e 22294718 debug extra vlc-dbg_2.2.4-1~deb8u1_i386.deb 0607e2fa99cb30b6345f96584a0f60d1 2492286 video optional vlc-nox_2.2.4-1~deb8u1_i386.deb e91fc2275fced8c1ca9d7e60fa7f4dcb 6458 video optional vlc-plugin-fluidsynth_2.2.4-1~deb8u1_i386.deb 8ae4a7b208026aa13434e962e0eb7f22 11910 video optional vlc-plugin-jack_2.2.4-1~deb8u1_i386.deb 5233d7a514a5fb6c6e7699354be2b321 5872 video optional vlc-plugin-notify_2.2.4-1~deb8u1_i386.deb 4cda607711f5e038f19088af95f38388 8252 video optional vlc-plugin-sdl_2.2.4-1~deb8u1_i386.deb 9858cbc9aa48ad73788812ea1965c8f5 6522 video optional vlc-plugin-svg_2.2.4-1~deb8u1_i386.deb ed7d803c39064e1801b4698ec599c462 11330 video optional vlc-plugin-zvbi_2.2.4-1~deb8u1_i386.deb 1cf0de686ee027cdc68403f8dd0cc8da 5300 video optional vlc-plugin-samba_2.2.4-1~deb8u1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJXVK55AAoJEIk4rQGIRk2LKNIP/jgzLtcHp+SDm7GbuAqarqab P8P8zZw/JrzD7Ok7c7Xw7hggyQjniXvS/h4w/6kxZFT96wX77HTcMIXOKwiK5Kip kYVdTwfTNpv/UlqULWMbHOoT98S75JiVuDr0cArn6cDKRKAiUMnjfD88jDqcwr2P DhP6qKuMxFl/qhhH+j2cg+cvaiRlTrwsGdhadfLciGmw5adnXyzwpL1bCLMt3gGy BzJvyQyMueL+2i6JzMZ0MzlvmCNwxjpbB8JdUltA8eA5FO5LAj/aP67eKSepV+iR ih+DLZnYJ+epPR/iuNCv5Kpk4JCeCNSa0pq1wXimZYr5kLfU4nwd7czfZwEwDI1y t85DkJO+haJEH9w8dTv4Vv7r9nk6yl5au9Fvtv+CqW6E319OVsHmOsTyUSYip1yn EGoZZOSxTNGY15cMXtCebqYt6mWfUgLbt5jY0jHwH/6Ssg3OVVsgqV987uRd5vSj Jq/33ieO32NlpdLJ+VquDESnuhvIywEDouyPWlzYKeNtJG9JpLfHkxTv5+csKLNy M+xhbfmUdqTTk3tX42Ube/fL+DoI1sNkrFFlYYLlYpZwejS5z4K6pf/w9D5K2MQw 8HX6P3n6oGOUQAoP3f5rbHvv4KUArylRjgiuCodYBQlSey0AMhtTGcxb+lk0nb8x 3neW1MrhqH+aqV7ag4yt =Jbnf -----END PGP SIGNATURE-----