Detections
Analytics
openSUSE Security Update : vlc (openSUSE-2021-691)
high Nessus Plugin ID 149579
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
This update for vlc fixes the following issues :Update to version 3.0.13 :
+ Demux :
- Adaptive: fix artefacts in HLS streams with wrong profiles/levels
- Fix regression on some MP4 files for the audio track
- Fix MPGA and ADTS probing in TS files
- Fix Flac inside AVI files
- Fix VP9/Webm artefacts when seeking
+ Codec :
- Support SSA text scaling
- Fix rotation on Android rotation
- Fix WebVTT subtitles that start at 00:00
+ Access :
- Update libnfs to support NFSv4
- Improve SMB2 integration
- Fix Blu-ray files using Unicode names on Windows
- Disable mcast lookups on Android for RTSP playback
+ Video Output: Rework the D3D11 rendering wait, to fix choppiness on display
+ Interfaces :
- Fix VLC getting stuck on close on X11 (#21875)
- Improve RTL on preferences on macOS
- Add mousewheel horizontal axis control
- Fix crash on exit on macOS
- Fix sizing of the fullscreen controls on macOS
+ Misc :
- Improve MIDI fonts search on Linux
- Update Soundcloud, Youtube, liveleak
- Fix compilation with GCC11
- Fix input-slave option for subtitles
+ Updated translations.
Update to version 3.0.12 :
+ Access: Add new RIST access module compliant with simple profile (VSF_TR-06-1).
+ Access Output: Add new RIST access output module compliant with simple profile (VSF_TR-06-1).
+ Demux: Fixed adaptive's handling of resolution settings.
+ Audio output: Fix audio distortion on macOS during start of playback.
+ Video Output: Direct3D11: Fix some potential crashes when using video filters.
+ Misc :
- Several fixes in the web interface, including privacy and security improvements
- Update YouTube and Vocaroo scripts.
+ Updated translations.
Solution
Update the affected vlc packages.See Also
Plugin Details
Severity: High
ID: 149579
File Name: openSUSE-2021-691.nasl
Version: 1.3
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 5/18/2021
Updated: 1/1/2024
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2020-26664
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:libvlc5, p-cpe:/a:novell:opensuse:libvlc5-debuginfo, p-cpe:/a:novell:opensuse:libvlccore9, p-cpe:/a:novell:opensuse:libvlccore9-debuginfo, p-cpe:/a:novell:opensuse:vlc, p-cpe:/a:novell:opensuse:vlc-codec-gstreamer, p-cpe:/a:novell:opensuse:vlc-codec-gstreamer-debuginfo, p-cpe:/a:novell:opensuse:vlc-debuginfo, p-cpe:/a:novell:opensuse:vlc-debugsource, p-cpe:/a:novell:opensuse:vlc-devel, p-cpe:/a:novell:opensuse:vlc-jack, p-cpe:/a:novell:opensuse:vlc-jack-debuginfo, p-cpe:/a:novell:opensuse:vlc-lang, p-cpe:/a:novell:opensuse:vlc-nox, p-cpe:/a:novell:opensuse:vlc-nox-debuginfo, p-cpe:/a:novell:opensuse:vlc-opencv, p-cpe:/a:novell:opensuse:vlc-opencv-debuginfo, p-cpe:/a:novell:opensuse:vlc-qt, p-cpe:/a:novell:opensuse:vlc-qt-debuginfo, p-cpe:/a:novell:opensuse:vlc-vdpau, p-cpe:/a:novell:opensuse:vlc-vdpau-debuginfo, cpe:/o:novell:opensuse:15.2
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/8/2021
Vulnerability Publication Date: 1/8/2021
Reference Information
CVE: CVE-2020-26664