Difference between revisions of "Changelog/0.8.6g"
Jump to navigation
Jump to search
m (layout..) |
(Added VideoLAN-SA's) |
||
Line 4: | Line 4: | ||
== Security updates == | == Security updates == | ||
− | * Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}}) | + | * Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}}, {{VideoLAN-SA|0804}})) |
− | * Removed loading plugins from the current directory ({{CVE|2008-2147}}) | + | * Removed loading plugins from the current directory ({{CVE|2008-2147}}, {{VideoLAN-SA|0805}})) |
* Updated libpng on Windows and Mac OS X ({{CVE|2008-1382}}) | * Updated libpng on Windows and Mac OS X ({{CVE|2008-1382}}) | ||
* Fixed libid3tag denial of service ({{CVE|2008-2109}}) | * Fixed libid3tag denial of service ({{CVE|2008-2109}}) | ||
Line 15: | Line 15: | ||
* Correctly parses [[SAP]] announcements from [[MPEG]]-TS | * Correctly parses [[SAP]] announcements from [[MPEG]]-TS | ||
* Fixed [[AAC]] resampling | * Fixed [[AAC]] resampling | ||
− | * The Fullscreen Controller appears correctly on [[Mac OS X]], | + | * The Fullscreen Controller appears correctly on [[Mac OS X]], if the 'Always-on-top' video option was selected. |
− |
Revision as of 22:05, 18 May 2008
Changes between 0.8.6f and 0.8.6g
Security updates
- Removed VLC variable settings from Mozilla and ActiveX (CVE-2007-6683, VideoLAN-SA-0804))
- Removed loading plugins from the current directory (CVE-2008-2147, VideoLAN-SA-0805))
- Updated libpng on Windows and Mac OS X (CVE-2008-1382)
- Fixed libid3tag denial of service (CVE-2008-2109)
- Fixed libvorbis vulnerabilities (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423)