From 0d0f445a06a945e9b685780f0610f1e500c0f486 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 6 Jan 2026 20:26:26 +0100 Subject: [PATCH] package/vlc: security bump to version 3.0.23 https://code.videolan.org/videolan/vlc/-/blob/3.0.23/NEWS "Security: * Fix null deref in libass, undefined shift in theora and cc-708, integer overflow in daala, Infinite loop in h264 parsing, buffer overflow in png and multiple format-overflows" https://code.videolan.org/videolan/vlc/-/tags/3.0.23 "It also adds a small feature on audio codec information, and fixes extra security issues compared to the numerous we fixed in 3.0.22." Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 9c3d4008166e52e13e774f5b21b40ce4f75429cb) Signed-off-by: Thomas Perale --- package/vlc/vlc.hash | 8 ++++---- package/vlc/vlc.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/vlc/vlc.hash b/package/vlc/vlc.hash index 6733a870b1..9634ba3f1f 100644 --- a/package/vlc/vlc.hash +++ b/package/vlc/vlc.hash @@ -1,7 +1,7 @@ -# From https://get.videolan.org/vlc/3.0.22/vlc-3.0.22.tar.xz.sha256 -sha256 e2cc1cf0ae0902a09da5a37c249a8a4e4b5ec4dc095443b8e1493c6a7cc138ea vlc-3.0.22.tar.xz -# From https://get.videolan.org/vlc/3.0.22/vlc-3.0.22.tar.xz.sha1 -sha1 f9871439cdb281e18a78828c389cf7bf66d47d69 vlc-3.0.22.tar.xz +# From https://get.videolan.org/vlc/3.0.23/vlc-3.0.23.tar.xz.sha256 +sha256 e891cae6aa3ccda69bf94173d5105cbc55c7a7d9b1d21b9b21666e69eff3e7e0 vlc-3.0.23.tar.xz +# From https://get.videolan.org/vlc/3.0.23/vlc-3.0.23.tar.xz.sha1 +sha1 7b8c00a9c5bb879a403d5328c99924eefe01739a vlc-3.0.23.tar.xz # Locally computed sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING.LIB diff --git a/package/vlc/vlc.mk b/package/vlc/vlc.mk index 81783c99ed..a878a78181 100644 --- a/package/vlc/vlc.mk +++ b/package/vlc/vlc.mk @@ -4,7 +4,7 @@ # ################################################################################ -VLC_VERSION = 3.0.22 +VLC_VERSION = 3.0.23 VLC_SITE = https://get.videolan.org/vlc/$(VLC_VERSION) VLC_SOURCE = vlc-$(VLC_VERSION).tar.xz VLC_LICENSE = GPL-2.0+, LGPL-2.1+