Fabrice Fontaine 8b0ba84e38 package/vlc: security bump to version 3.0.20 ...

Fix CVE-2023-47359: Videolan VLC prior to version 3.0.20 contains an
incorrect offset read that leads to a Heap-Based Buffer Overflow in
function GetPacket() and results in a memory corruption.

Fix CVE-2023-47360: Videolan VLC prior to version 3.0.20 contains an
Integer underflow that leads to an incorrect packet length.

https://code.videolan.org/videolan/vlc/-/blob/3.0.20/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d675873f4fe9b601719b08cdd8a901d73ec7f731)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2023-11-30 23:42:27 +01:00

..

0001-Disable-building-of-statically-linked-vlc-binary.patch

…

0002-automake-add-subdir-objects-option.patch

…

0003-build-use-pkg-config-to-get-tremor-libs.patch

…

0004-Fix-build-error-using-uClibc-by-adding-sys-types.h.patch

…

0005-Don-t-assume-strerror_l-is-available.patch

…

0006-posix-remove-ancient-run-time-fallback-to-real-time-.patch

…

0007-Add-support-for-freerdp2.patch

…

0008-configure.ac-also-use-AC_PATH_PROG-to-check-for-wayl.patch

…

0009-modules-video_filter-opencv_example.cpp-fix-build-wi.patch

…

0010-opengl-missing-library-check.patch

…

Config.in

…

vlc.hash

…

vlc.mk

…