Revision as of 01:54, 9 June 2008

Changes between 0.8.6f and 0.8.6g

Removed VLC variable settings from Mozilla and ActiveX (CVE-2007-6683, VideoLAN-SA-0804)
Removed loading plugins from the current directory (CVE-2008-2147, VideoLAN-SA-0805)
Updated libpng on Windows and Mac OS X (CVE-2008-1382)
Fixed libid3tag denial of service (CVE-2008-2109)
Fixed libvorbis vulnerabilities (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423)
Fixed speex insufficient boundary check (CVE-2008-1686, oCERT-2008-004)

Fixed various memory leaks, improving stability when running as a server
Fixed compilation with recent versions of FFmpeg
Correctly parses SAP announcements from MPEG-TS
Fixed AAC resampling
The Fullscreen Controller appears correctly on Mac OS X, if the 'Always-on-top' video option was selected.

@@ Line 2: / Line 2: @@
 == Security updates ==
-* Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}}, {{VideoLAN-SA|0804}}))
+* Removed VLC variable settings from Mozilla and ActiveX ({{CVE|2007-6683}}, {{VideoLAN-SA|0804}})
-* Removed loading plugins from the current directory ({{CVE|2008-2147}}, {{VideoLAN-SA|0805}}))
+* Removed loading plugins from the current directory ({{CVE|2008-2147}}, {{VideoLAN-SA|0805}})
 * Updated libpng on Windows and Mac OS X ({{CVE|2008-1382}})
 * Fixed libid3tag denial of service ({{CVE|2008-2109}})
 * Fixed libvorbis vulnerabilities ({{CVE|2008-1419}}, {{CVE|2008-1420}}, {{CVE|2008-1423}})
-* Fixed speex insufficient boundary check (oCERT-2008-004)
+* Fixed speex insufficient boundary check (CVE-2008-1686, oCERT-2008-004)
 == Various bugfixes ==