GCVE-VVD-MAGEIA-2019-233

Advisory Published

Vulnetix · Advisory published December 13, 2019

Updated vlc packages fixes security vulnerabilities: Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed (CVE-2019-13602, CVE-2019-13962, CVE-2019-14437, CVE-2019-14438, CVE-2019-14498, CVE-2019-14533, CVE-2019-14534, CVE-2019-14535, CVE-2019-14776, CVE-2019-14777, CVE-2019-14778, CVE-2019-14970). The vlc package has been updated to version 3.0.8, fixing these issues and other bugs. In Mageia 6, the libebml package has been updated to version 1.3.7, which is needed for Matroska support.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	minitube	0 (affected), 3.2-1.mga7 (unaffected)	—
Mageia	libebml	0 (affected), 1.3.7-1.mga6 (unaffected), 0 (affected), 1.3.7-1.mga6 (unaffected)	—
Mageia	vlc	0 (affected), 3.0.8-1.mga6 (unaffected), 0 (affected), 3.0.8-1.mga6.tainted (unaffected), 0 (affected), 3.0.8-1.mga6 (unaffected), 0 (affected), 3.0.8-1.mga6.tainted (unaffected)	—
Mageia	vlc	0 (affected), 3.0.8-1.mga7 (unaffected), 0 (affected), 3.0.8-1.mga7.tainted (unaffected), 0 (affected), 3.0.8-1.mga7 (unaffected), 0 (affected), 3.0.8-1.mga7.tainted (unaffected)	—