openSUSE Security Update : vlc (openSUSE-SU-2015:0201-1)

high Nessus Plugin ID 81199

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

vlc was updated to the current openSUSE Tumbleweed version.

live555 was also updated to the current openSUSE Tumbleweed version as a dependency.

Security issues fixed :

- Fix various buffer overflows and null ptr dereferencing (boo#914268, CVE-2014-9625).

Other fixes :

- Enable SSE2 instruction set for x86_64

- Disable fluidsynth again: the crashes we had earlier are still not all fixed. They are less, but less common makes it more difficult to debug.

On openSUSE 13.1 :

- Update to version 2.1.5 :

+ Core: Fix compilation on OS/2.

+ Access: Stability improvements for the QTSound capture module.

+ Mac OS X audio output :

- Fix channel ordering.

- Increase the buffersize.

+ Decoders :

- Fix DxVA2 decoding of samples needing more surfaces.

- Improve MAD resistance to broken mp3 streams.

- Fix PGS alignment in MKV.

+ Qt Interface: Don't rename mp3 converted files to .raw.

+ Mac OS X Interface :

- Correctly support video-on-top.

- Fix video output event propagation on Macs with retina displays.

- Stability improvements when using future VLC releases side by side.

+ Streaming: Fix transcode when audio format changes.

+ Updated translations.

- Update to version 2.1.4 :

+ Demuxers: Fix issue in WMV with multiple compressed payload and empty payloads.

+ Video Output: Fix subtitles size rendering on Windows.

+ Mac OS X :

- Fix DVD playback regression.

- Fix misleading error message during video playback on OS X 10.9.

- Fix hardware acceleration memleaks.

Solution

Update the affected vlc packages.

Plugin Details

Severity: High

ID: 81199

File Name: openSUSE-2015-99.nasl

Version: 1.6

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 2/6/2015

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:vlc-qt-debuginfo, p-cpe:/a:novell:opensuse:live555-devel, p-cpe:/a:novell:opensuse:libvlccore7-debuginfo, p-cpe:/a:novell:opensuse:vlc-devel, p-cpe:/a:novell:opensuse:vlc-nox, p-cpe:/a:novell:opensuse:vlc-debugsource, p-cpe:/a:novell:opensuse:vlc-gnome, p-cpe:/a:novell:opensuse:libvlc5, p-cpe:/a:novell:opensuse:vlc-nox-lang, p-cpe:/a:novell:opensuse:vlc-qt, cpe:/o:novell:opensuse:13.2, p-cpe:/a:novell:opensuse:vlc-gnome-debuginfo, cpe:/o:novell:opensuse:13.1, p-cpe:/a:novell:opensuse:vlc-nox-debuginfo, p-cpe:/a:novell:opensuse:libvlccore7, p-cpe:/a:novell:opensuse:libvlc5-debuginfo, p-cpe:/a:novell:opensuse:vlc-debuginfo, p-cpe:/a:novell:opensuse:vlc

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 1/26/2015

Vulnerability Publication Date: 1/24/2020

Reference Information

CVE: CVE-2014-9625

Detections

Analytics