summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorriggs <riggs@FreeBSD.org>2017-05-28 07:10:55 +0000
committerriggs <riggs@FreeBSD.org>2017-05-28 07:10:55 +0000
commitb5e1256c2e6e5a4583458b8adc7e75e1eb6ebdb3 (patch)
treee2ee0fd88f1e1e2287a9764dff297f18a1dcecfe
parent20def0e635aa2c6144e337d4977c94e7317105de (diff)
downloadFreeBSD-ports-b5e1256c2e6e5a4583458b8adc7e75e1eb6ebdb3.zip
FreeBSD-ports-b5e1256c2e6e5a4583458b8adc7e75e1eb6ebdb3.tar.gz
MFH: r441756
Update to upstream version 2.2.6 Details: This is a bugfix release for the recently discovered subtitle remote vulnerability, see http://blog.checkpoint.com/2017/05/23/hacked-in-translation/ In addition to the statements in this blog post, the VLC devs added bounds checks and string termination in multiple places in the subtitle demuxer. It is hence possible that, contrary to the blog post, this issue was not fixed completely in version 2.2.5.1 Approved by: portmgr (miwi)
-rw-r--r--multimedia/vlc/Makefile2
-rw-r--r--multimedia/vlc/distinfo6
2 files changed, 4 insertions, 4 deletions
diff --git a/multimedia/vlc/Makefile b/multimedia/vlc/Makefile
index 44c8de4..b602fc7 100644
--- a/multimedia/vlc/Makefile
+++ b/multimedia/vlc/Makefile
@@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= vlc
-DISTVERSION= 2.2.5.1
+DISTVERSION= 2.2.6
PORTEPOCH= 4
CATEGORIES= multimedia audio ipv6 net www
MASTER_SITES= http://download.videolan.org/pub/videolan/${PORTNAME}/${DISTVERSION:S/a$//}/ \
diff --git a/multimedia/vlc/distinfo b/multimedia/vlc/distinfo
index 32d2f1c..357ed07 100644
--- a/multimedia/vlc/distinfo
+++ b/multimedia/vlc/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1494659367
-SHA256 (vlc-2.2.5.1.tar.xz) = b28b8a28f578c0c6cb1ebed293aca2a3cd368906cf777d1ab599e2784ddda1cc
-SIZE (vlc-2.2.5.1.tar.xz) = 21946020
+TIMESTAMP = 1495777516
+SHA256 (vlc-2.2.6.tar.xz) = c403d3accd9a400eb2181c958f3e7bc5524fe5738425f4253d42883b425a42a8
+SIZE (vlc-2.2.6.tar.xz) = 22198720
OpenPOWER on IntegriCloud