Commit Graph

7 Commits

Author SHA1 Message Date
sthen
18357e3cf8 SECURITY update to 1.1.16.2; CVE-2008-5239, CVE-2008-5240, TKADV2009-004
from Brad (maintainer).
2009-02-16 01:24:24 +00:00
sthen
db3179044c - SECURITY update to Xine-lib 1.1.16.1
- Heap overflow in Quicktime atom parsing.  (CVE-2008-5234 vector 1)
  - Multiple buffer overflows.                (CVE-2008-5236)
  - Multiple integer overflows.               (CVE-2008-5237)
  - Unchecked read function results.          (CVE-2008-5239)
  - Unchecked malloc using untrusted values.  (CVE-2008-5240 vectors 3 & 4)
  - Buffer indexing using an untrusted value. (CVE-2008-5243)
- Clean up the Makefile
- Enable the Xv motion compensation support
- Remove the JACK sound support
- Remove the now unnecessary multi-packaging
- Remove an unnecessary patch for the Sun sound code
- Comment out some files in the PLIST that do not pertain to OpenBSD
- Add WavPack support

from Brad (taking MAINTAINER).
2009-02-02 22:00:42 +00:00
brad
cca4867cee update to Xine-lib 1.1.14
ok jakemsr@
2008-07-02 01:02:42 +00:00
brad
53a59191f0 update to Xine-lib 1.1.13
This release contains a security fix (buffer overflow in the NSF demuxer,
CVE-2008-1878). There are also a few bug fixes, and a new JACK output
plugin.

ok jakemsr@
2008-06-18 01:26:40 +00:00
jakemsr
eb44a52c7c update to 1.1.9.1
security fix: CVE-2008-0225 - heap-based buffer overflow in libreal (RTSP)

also incorporates post release bug fix in WMV decoding

from brad, thanks
2008-01-15 00:36:46 +00:00
jakemsr
088b853b2e maintainence update to xine-lib-1.1.8
from brad@
2007-10-31 10:55:37 +00:00
jakemsr
e8d61b3065 update to xine-lib-1.1.7
- use some CONFIGURE_ENV instead of patching
- rearrange/update CONFIGURE_ARGS
- many patches no longer relevant
- add CD audio support

input, tetsing and prodding from brad@
2007-06-13 10:58:28 +00:00