X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=NEWS;h=f26560a4cfccc5a0ad6b5a1515edc38435ce55be;hb=dbe08e77c77ce97eff8a7f2a581f985a6866869b;hp=15edf3817ee2a49253ff653244c75ecac3202c6d;hpb=827f8b92b5caab8b5ac5ce0a68379cf0071d0047;p=vlc diff --git a/NEWS b/NEWS index 15edf3817e..f26560a4cf 100644 --- a/NEWS +++ b/NEWS @@ -34,7 +34,7 @@ Important notes: New: '#rtp{dst=239.255.1.2,sap}' * You now need to append --m3u-extvlcopt to your command line to enable EXTVLCOPT options parsing in m3u playlists. Note that only a limited set - of options is available to m3u playlists. + of options is available to m3u playlists (CVE-2007-6683). Changes: -------- @@ -176,6 +176,7 @@ New Localizations: * Persian * Polish +TODO: Add 0.8.6e changelog here Changes between 0.8.6c and 0.8.6d: ---------------------------------- @@ -191,7 +192,7 @@ Windows and Mac OS Binaries * FLAC Security Update (CVE-2007-4619) to prevent multiple integer overflows Active X plugin: - * Security update (VideoLAN-SA-0703) + * Security update (VideoLAN-SA-0703, CVE-2007-6262) Mac OS X Interface & Port: * Apple Remote support on Mac OS X 10.5 Leopard with enhanced functionality @@ -208,6 +209,7 @@ Other changes: * The automatic updating facility was removed * You now need to append --m3u-extvlcopt to your command line to enable EXTVLCOPT options parsing in m3u playlists. + * RTSP server remote denial of service fixed (CVE-2007-6684). Changes between 0.8.6b and 0.8.6c: @@ -222,10 +224,11 @@ Various bugfixes, notably: * MKV demuxer crash (related to seeking) CDDA / Vorbis / Theora / SAP plugins: - * Security updates (VideoLAN-SA-0702, CVE-2007-3316) + * Security updates (VideoLAN-SA-0702, CVE-2007-3316, US-CERT VU#200928) Demuxers: * Fixed a problem with detecting embedded subtitles (GAB2 format) in AVI + * Prevent WAV file integer overflow (CVE-2007-3467 & CVE-2007-3468) Decoders: * Updated FLAC API compatibility @@ -266,7 +269,7 @@ Changes between 0.8.6 and 0.8.6a: --------------------------------- CDDA / VCDX plugins: - * Security updates (VideoLAN-SA-0701) + * Security updates (VideoLAN-SA-0701, CVE-2007-0017) Mac OS X Interface: * Fullscreen controller improvements