svn commit: r441896 - branches/2017Q2/multimedia/vlc

[Thomas Zander]

Author: riggs
Date: Sun May 28 07:10:55 2017
New Revision: 441896
URL: https://svnweb.freebsd.org/changeset/ports/441896

Log:
  MFH: r441756
  
  Update to upstream version 2.2.6
  
  Details:
  This is a bugfix release for the recently discovered
  subtitle remote vulnerability, see
  http://blog.checkpoint.com/2017/05/23/hacked-in-translation/
  In addition to the statements in this blog post, the VLC devs
  added bounds checks and string termination in multiple places
  in the subtitle demuxer. It is hence possible that, contrary
  to the blog post, this issue was not fixed completely in
  version 2.2.5.1
  
  Approved by:	portmgr (miwi)

Modified:
  branches/2017Q2/multimedia/vlc/Makefile
  branches/2017Q2/multimedia/vlc/distinfo
Directory Properties:
  branches/2017Q2/   (props changed)

Modified: branches/2017Q2/multimedia/vlc/Makefile
==============================================================================
--- branches/2017Q2/multimedia/vlc/Makefile	Sun May 28 03:53:36 2017	(r441895)
+++ branches/2017Q2/multimedia/vlc/Makefile	Sun May 28 07:10:55 2017	(r441896)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	vlc
-DISTVERSION=	2.2.5.1
+DISTVERSION=	2.2.6
 PORTEPOCH=	4
 CATEGORIES=	multimedia audio ipv6 net www
 MASTER_SITES=	http://download.videolan.org/pub/videolan/${PORTNAME}/${DISTVERSION:S/a$//}/ \

Modified: branches/2017Q2/multimedia/vlc/distinfo
==============================================================================
--- branches/2017Q2/multimedia/vlc/distinfo	Sun May 28 03:53:36 2017	(r441895)
+++ branches/2017Q2/multimedia/vlc/distinfo	Sun May 28 07:10:55 2017	(r441896)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1494659367
-SHA256 (vlc-2.2.5.1.tar.xz) = b28b8a28f578c0c6cb1ebed293aca2a3cd368906cf777d1ab599e2784ddda1cc
-SIZE (vlc-2.2.5.1.tar.xz) = 21946020
+TIMESTAMP = 1495777516
+SHA256 (vlc-2.2.6.tar.xz) = c403d3accd9a400eb2181c958f3e7bc5524fe5738425f4253d42883b425a42a8
+SIZE (vlc-2.2.6.tar.xz) = 22198720