Security update for vlc (important)

🗓️ 15 Aug 2019 00:00:00Reported by OpenSuseType

opensuse🔗 lists.opensuse.org👁 87 Views

Security update available for vlc (v3.0.7.1

Reporter	Title	Published	Views	Family All 181
FreeBSD	vlc -- Double free in Matroska demuxer	20 May 201900:00	–	freebsd
FreeBSD	vlc -- multiple vulnerabilities	14 Jul 201900:00	–	freebsd
FreeBSD	vlc -- Buffer overflow vulnerability	23 Jan 201900:00	–	freebsd
ATTACKERKB	CVE-2019-13962 avcodec lavc_CopyPicture Heap Buffer Overflow	13 Feb 202000:00	–	attackerkb
ATTACKERKB	VLC zlib_decompress_extra Double Free Vulnerability	18 Jun 201900:00	–	attackerkb
AlpineLinux	CVE-2019-13602	14 Jul 201921:00	–	alpinelinux
AlpineLinux	CVE-2019-13962	18 Jul 201919:58	–	alpinelinux
ArchLinux	[ASA-201906-22] vlc: arbitrary code execution	25 Jun 201900:00	–	archlinux
BDU FSTEC	The vulnerability of the CAF demultiplexer in the VideoLAN VLC media player lies in the access to an uninitialized pointer, which allows a hacker to trigger a service failure and/or gain access to confidential data.	4 Apr 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the MP4_EIA608_Convert() function (modules/demux/mp4/mp4.c) of the VideoLAN Media Player, allowing a hacker to cause a service failure	13 Aug 201900:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse backports	15	noarch	libvlc5-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	libvlc5
opensuse backports	15	noarch	libvlccore9-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	libvlccore9
opensuse backports	15	noarch	vlc-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc
opensuse backports	15	noarch	vlc-codec-gstreamer-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-codec-gstreamer
opensuse backports	15	noarch	vlc-devel-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-devel
opensuse backports	15	noarch	vlc-jack-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-jack
opensuse backports	15	noarch	vlc-lang-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-lang
opensuse backports	15	noarch	vlc-nox-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-noX
opensuse backports	15	noarch	vlc-qt-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-qt
opensuse backports	15	noarch	vlc-vdpau-3.0.7.1-bp151.5.3.3.noarch.rpm	3.0.7.1	vlc-vdpau

15 Aug 2019 00:00Current

8High risk

Vulners AI Score8

CVSS 27.5

CVSS 39.8

CVSS 3.19.8

EPSS0.05295

vulnerability fixes buffer overflow integer underflow double free zlib decompress mp4 demuxer heap-based buffer over-read video output blu-ray support audio output mp4 support chromecast support translation updates suse installation methods.