On Wed, Feb 07, 2018 at 02:53:12PM +0800, Alex Vong wrote: > Tags: security > > Hello, > > This patch fixes CVE-2018-6360, which is about mpv maybe get tricked > into playing unsafe url returned by youtube-dl. > > From 2a6538067bdad659672f1d19811bad8a5b8d9d56 Mon Sep 17 00:00:00 2001 > From: Alex Vong > Date: Wed, 7 Feb 2018 14:39:40 +0800 > Subject: [PATCH] gnu: mpv: Fix CVE-2018-6360. > > * gnu/packages/patches/mpv-CVE-2018-6360-1.patch, > gnu/packages/patches/mpv-CVE-2018-6360-2.patch, > gnu/packages/patches/mpv-CVE-2018-6360-3.patch: New files. > * gnu/local.mk (dist_patch_DATA): Add them. > * gnu/packages/video.scm (mpv)[source]: Use them. Pushed as e61da2e8848782052d6d5d69f111520a7f772e52