From gitlab at videolan.org Mon Jan 18 12:04:40 2021 From: gitlab at videolan.org (Jean-Baptiste Kempf) Date: Mon, 18 Jan 2021 13:04:40 +0100 Subject: [www-doc] [Git][VideoLAN.org/websites][master] Fixing word Message-ID: <600579589de34_1de03f9b37e6985014011f9@gitlab.mail> Jean-Baptiste Kempf pushed to branch master at VideoLAN organization / websites Commits: caa9121d by Óscar Vega at 2021-01-18T13:04:26+01:00 Fixing word - - - - - 1 changed file: - www.videolan.org/locale/es-MX/LC_MESSAGES/website.po Changes: ===================================== www.videolan.org/locale/es-MX/LC_MESSAGES/website.po ===================================== @@ -175,7 +175,7 @@ msgstr "Otros sistemas" #: include/os-specific.php:260 msgid "downloads so far" -msgstr "descragas mas allá" +msgstr "descargas mas allá" #: include/os-specific.php:648 msgid "" View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/caa9121d9b564311d018ea840411dcfd7673d7d4 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/caa9121d9b564311d018ea840411dcfd7673d7d4 You're receiving this email because of your account on code.videolan.org. From gitlab at videolan.org Mon Jan 18 12:04:55 2021 From: gitlab at videolan.org (Jean-Baptiste Kempf) Date: Mon, 18 Jan 2021 13:04:55 +0100 Subject: [www-doc] [Git][VideoLAN.org/websites][master] 4 commits: security: Add a SB for 3.0.12 Message-ID: <600579674edf0_1de03f9b418496dc14026c1@gitlab.mail> Jean-Baptiste Kempf pushed to branch master at VideoLAN organization / websites Commits: 58107719 by Hugo Beauzée-Luyssen at 2021-01-18T13:04:50+01:00 security: Add a SB for 3.0.12 - - - - - 334f221c by Hugo Beauzée-Luyssen at 2021-01-18T13:04:50+01:00 vlc: Add a 3.0.12 release page - - - - - cf932db8 by Hugo Beauzée-Luyssen at 2021-01-18T13:04:50+01:00 vlc: Add 3.0.12 download counters - - - - - 6dbb7dd6 by Hugo Beauzée-Luyssen at 2021-01-18T13:04:50+01:00 vlc: Release 3.0.12 - - - - - 5 changed files: - www.videolan.org/include/os-specific.php - www.videolan.org/news.msg - + www.videolan.org/security/sb-vlc3012.php - + www.videolan.org/vlc/releases/3.0.12.php - www.videolan.org/vlc/stats/downloads.php Changes: ===================================== www.videolan.org/include/os-specific.php ===================================== @@ -1,9 +1,9 @@ the release page. + |23 October 2020|libbluray 1.2.1|A minor release of libbluray was pushed today, focused on fixing bugs and improving the support for UHD Blurays. More details on the libbluray page. |23 September 2020| VLC for Android 3.3|VideoLAN is proud to release the new major version of VLC for Android. A complete design rework has been done. The navigation is now at the bottom for a better experience. The Video player has also been completely revamped for a more modern look. The video grouping has been improved and lets you create custom groups. You can also easily share your media with your friends. The settings have been simplified and a lot of bugs have been fixed. ===================================== www.videolan.org/security/sb-vlc3012.php ===================================== @@ -0,0 +1,58 @@ + + + +
+Summary : Multiple vulnerabilities fixed in VLC media player +Date : December 2020 +Affected versions : VLC media player 3.0.11 and earlier +ID : VideoLAN-SB-VLC-3012 ++ +
A remote user could create a specifically crafted file that could trigger some various issues, notably 2 read buffer overflows, and some invalid pointers being dereferenced.
+ +If successful, a malicious third party could trigger either a crash of VLC or an arbitratry code execution with the privileges of the target user.
+While these issues in themselves are most likely to just crash the player, we can't exclude that they could be combined to leak user informations or +remotely execute code. ASLR and DEP help reduce the likelyness of code execution, but may be bypassed.
+We have not seen exploits performing code execution through these vulnerability
+Exploitation of those issues requires the user to explicitly open a specially crafted file or stream.
+ +The user should refrain from opening files from untrusted third parties +or accessing untrusted remote sites (or disable the VLC browser plugins), +until the patch is applied. +
+ +VLC media player 3.0.12 addresses the issue. +
+ +All but one of the issues fixed in this version have been reported by Zhen Zhou, NSFOCUS Security Team
+ +VLC 3.0 playing 8K 48fps 360 video on Android Galaxy S8 from VideoLAN on Vimeo.
+VLC 3.0 playing 8k60 on Windows 10 using i7 GPU from VideoLAN on Vimeo.
+Ask your favorite packager for VLC 3.0!
+For any questions related to this release, please contact us.
+Those bulletins are related to each VLC release and can be made of multiple security issues, internal and external.
Use the following address: 3EowKLZ7Gf86BrHad7XXNpFk8jfXBeNPuF
+Use the following address: bc1q27wp4frlsckghy3vgdjg4rnlsxztxca0f2r4a7
Or the QR-Code:
===================================== www.videolan.org/images/bitcoin-3EowKLZ7Gf86BrHad7XXNpFk8jfXBeNPuF.png deleted ===================================== Binary files a/www.videolan.org/images/bitcoin-3EowKLZ7Gf86BrHad7XXNpFk8jfXBeNPuF.png and /dev/null differ ===================================== www.videolan.org/images/bitcoin-bc1q27wp4frlsckghy3vgdjg4rnlsxztxca0f2r4a7.png ===================================== Binary files /dev/null and b/www.videolan.org/images/bitcoin-bc1q27wp4frlsckghy3vgdjg4rnlsxztxca0f2r4a7.png differ View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/47aea2565c5571ce08dce69c0adac8342ef48bf4 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/47aea2565c5571ce08dce69c0adac8342ef48bf4 You're receiving this email because of your account on code.videolan.org. From gitlab at videolan.org Thu Jan 21 12:36:42 2021 From: gitlab at videolan.org (Jean-Baptiste Kempf) Date: Thu, 21 Jan 2021 13:36:42 +0100 Subject: [www-doc] [Git][VideoLAN.org/websites][master] Fix news date Message-ID: <6009755a7d8c5_1de03f9b43fe8b9818084db@gitlab.mail> Jean-Baptiste Kempf pushed to branch master at VideoLAN organization / websites Commits: b5a1f3ae by Jean-Baptiste Kempf at 2021-01-21T13:36:31+01:00 Fix news date - - - - - 1 changed file: - www.videolan.org/news.msg Changes: ===================================== www.videolan.org/news.msg ===================================== @@ -1,6 +1,6 @@ # Comments begin with a # # New topics begin with mechanism# -|12 January 2021|VLC 3.0.12|VideoLAN is now publishing 3.0.12 release, which adds support for Apple Silicon, improves Bluray, DASH and RIST support. It fixes some audio issues on macOS, some crashes on Windows and fixes security issues. More details on the release page. +|18 January 2021|VLC 3.0.12|VideoLAN is now publishing 3.0.12 release, which adds support for Apple Silicon, improves Bluray, DASH and RIST support. It fixes some audio issues on macOS, some crashes on Windows and fixes security issues. More details on the release page. |23 October 2020|libbluray 1.2.1|A minor release of libbluray was pushed today, focused on fixing bugs and improving the support for UHD Blurays. More details on the libbluray page. View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/b5a1f3ae4972eeffc497f3352e38eb4f9f6410d2 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/b5a1f3ae4972eeffc497f3352e38eb4f9f6410d2 You're receiving this email because of your account on code.videolan.org. From gitlab at videolan.org Tue Jan 26 10:49:24 2021 From: gitlab at videolan.org (David) Date: Tue, 26 Jan 2021 11:49:24 +0100 Subject: [www-doc] [Git][VideoLAN.org/websites][master] nightlies.v.o: Adapt links to macOS intel + arm nightlies Message-ID: <600ff3b4ec64d_85f53289823472c@gitlab.mail> David pushed to branch master at VideoLAN organization / websites Commits: 68659e8e by David Fuhrmann at 2021-01-26T11:46:24+01:00 nightlies.v.o: Adapt links to macOS intel + arm nightlies - - - - - 1 changed file: - nightlies.videolan.org/index.php Changes: ===================================== nightlies.videolan.org/index.php ===================================== @@ -33,11 +33,13 @@