- updated to 3.0.8, solves:

  - buffer overflow in the MKV demuxer (CVE-2019-14970)
  - read buffer overflow in the avcodec decoder (CVE-2019-13962)
  - read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438)
  - read buffer overflow in the ASF demuxer (CVE-2019-14776)
  - use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778)
  - use after free in the ASF demuxer (CVE-2019-14533)
  - couple of integer underflows in the MP4 demuxer (CVE-2019-13602)
  - null dereference in the ASF demuxer (CVE-2019-14534)
  - division by zero in the CAF demuxer (CVE-2019-14498)
  - division by zero in the ASF demuxer (CVE-2019-14535)

diff --git a/vlc.spec b/vlc.spec
index 7b148777e3d62ff34c0db33db437b7c298ee0369..e67436a9379474facc07f050e91f13cf01371ea6 100644 (file)
--- a/vlc.spec
+++ b/vlc.spec
@@ -68,12 +68,12 @@
 Summary:       VLC - a multimedia player and stream server
 Summary(pl.UTF-8):     VLC - odtwarzacz multimedialny oraz serwer strumieni
 Name:          vlc
-Version:       3.0.7.1
+Version:       3.0.8
 Release:       1
 License:       GPL v2+
 Group:         X11/Applications/Multimedia
 Source0:       http://download.videolan.org/pub/videolan/vlc/%{version}/%{name}-%{version}.tar.xz
-# Source0-md5: 1adf2fe21070378b0e45ad163d3b232d
+# Source0-md5: 744442ec0c145453ea1d257914c8072e
 Patch0:                %{name}-buildflags.patch
 Patch1:                %{name}-tremor.patch
 Patch2:                %{name}-mpc.patch