Lucene search

K
suseSuseOPENSUSE-SU-2016:1651-1
HistoryJun 22, 2016 - 2:09 p.m.

Security update for vlc (important)

2016-06-2214:09:48
lists.opensuse.org
16

0.26 Low

EPSS

Percentile

96.2%

This update for vlc to version 2.1.6 fixes the following issues:

These CVE were fixed:

  • CVE-2016-5108: Reject invalid QuickTime IMA files (boo#984382).
  • CVE-2016-3941: Heap overflow in processing wav files (boo#973354).

These security issues without were fixed:

  • Fix heap overflow in decomp stream filter.
  • Fix buffer overflow in updater.
  • Fix potential buffer overflow in schroedinger encoder.
  • Fix null-pointer dereference in DMO decoder.
  • Fix buffer overflow in parsing of string boxes in mp4 demuxer.
  • Fix SRTP integer overflow.
  • Fix potential crash in zip access.
  • Fix read overflow in Ogg demuxer.