Bug 9495

Summary: [UPDATE REQUEST 2016.1] vlc 2.2.8 - > 3.0.4
Product: [ROSA-based products] ROSA Fresh Reporter: Giovanni Mariani <mc2374>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: RESOLVED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: normal    
Priority: Normal CC: andrey.bondrov, pastordidi, v.potapov
Version: AllFlags: v.potapov: qa_verified+
andrey.bondrov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Platform: 2016.1 ROSA Vulnerability identifier:
RPM Package: vlc-2.2.8-3plf.src.rpm ISO-related:
Bad POT generating: Upstream:
Bug Depends on: 9494    
Bug Blocks:    

Description Giovanni Mariani 2018-11-14 00:15:45 MSK
Our actual vlc package is rather old, is affected by CVEs listed in bug #9017 and does not build well against ffmpeg 4.0.x: so lets pick up the very latest release (3.0.4) to fix all the issues at once.
This also allow building against new libcdio and chromaprint libraries...

The changes since our 2.2.8 package are so many that is impossible to list them all here: see the NEWS file in the sources for all the gory details.
Comment 1 Giovanni Mariani 2018-11-14 00:18:08 MSK
Advisory:
Update vlc to the latest 3.0.4 release.

Packages for Rosa 2016.1/Main:
https://abf.rosalinux.ru/build_lists/2952129
https://abf.rosalinux.ru/build_lists/2952130

Packages for Rosa 2016.1/Restricted:
https://abf.rosalinux.ru/build_lists/2952598
https://abf.rosalinux.ru/build_lists/2952661
Comment 2 Dmitry Postnikov 2018-11-14 18:05:14 MSK
The update is sent to expanded testing
**************************************
Comment 3 Vladimir Potapov 2018-11-27 06:40:05 MSK
vlc-3.0.3-1
https://abf.rosalinux.ru/build_lists/2952129
https://abf.rosalinux.ru/build_lists/2952130

vlc-3.0.4-1plf
https://abf.rosalinux.ru/build_lists/2952598
https://abf.rosalinux.ru/build_lists/2952661
******************************** Advisory *************************
Update vlc to the latest 3.0.4 release.
*******************************************************************
QA Verified
Comment 4 Andrey Bondrov 2018-11-27 13:27:31 MSK
Please rebuild these packages with new VLC (they use libvlccore8 but VLC 3.0.x comes with libvlccore9):

megaglest
phonon-vlc
phonon4qt5-vlc