Revision as of 22:05, 18 May 2008

Changes between 0.8.6f and 0.8.6g

Removed VLC variable settings from Mozilla and ActiveX (CVE-2007-6683, VideoLAN-SA-0804))
Removed loading plugins from the current directory (CVE-2008-2147, VideoLAN-SA-0805))
Updated libpng on Windows and Mac OS X (CVE-2008-1382)
Fixed libid3tag denial of service (CVE-2008-2109)
Fixed libvorbis vulnerabilities (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423)

Fixed various memory leaks, improving stability when running as a server
Fixed compilation with recent versions of FFmpeg
Correctly parses SAP announcements from MPEG-TS
Fixed AAC resampling
The Fullscreen Controller appears correctly on Mac OS X, if the 'Always-on-top' video option was selected.

@@ Line 4: / Line 4: @@
 == Security updates ==
-* Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}})
+* Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}}, {{VideoLAN-SA|0804}}))
-* Removed loading plugins from the current directory ({{CVE|2008-2147}})
+* Removed loading plugins from the current directory ({{CVE|2008-2147}}, {{VideoLAN-SA|0805}}))
 * Updated libpng on Windows and Mac OS X ({{CVE|2008-1382}})
 * Fixed libid3tag denial of service ({{CVE|2008-2109}})
@@ Line 15: / Line 15: @@
 * Correctly parses [[SAP]] announcements from [[MPEG]]-TS
 * Fixed [[AAC]] resampling
-* The Fullscreen Controller appears correctly on [[Mac OS X]],
+* The Fullscreen Controller appears correctly on [[Mac OS X]], if the 'Always-on-top' video option was selected.
-   if the 'Always-on-top' video option was selected.