Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5545-1] vlc security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5545-1] vlc security update


Chronologisch Thread  
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5545-1] vlc security update
  • Date: Thu, 2 Nov 2023 22:17:05 +0000
  • Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
  • List-archive: https://lists.debian.org/msgid-search/ZUQf4V6me+TfAwfW AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=1A/SwR3DrQPVIMm25tDTk7b9Oa/Cbv9F1oghQRp1ZD8=; b=oJ BS6puCiTQ+E+XaWi4u5lexnjjk0382Lu0zgrUjXRUzsOHkP2SXih1CMp3UTSP1L6WmsVFlSOtzfcK VMO5y3rOzCi9Xa85WMU7o1c2ujk7ZlsxbyIdTdyNgDhkw5AgFAV1i4NJXtSdrLBNveAPYL9x988G5 QVYX3UaAQ7nhrDBDOeeoH7d1T4kjE3Msij6hf3wHEQANSFeZryvzJmhPWTnfbeEW7XPBlJTNX0+db EQPyOzkvbo8EH6NY286F9cLl0Xs2sMSa5NFHzikjo/XsnJRaMlMam1/8pBCcfh8iL60kcLByPSkvX 9PKfGSGpK3Ut/vSrvEn8lLDS+GnqUV+g==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Thu, 2 Nov 2023 22:17:30 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <nTbg1-R7QrK.A.Ed.6_BRlB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5545-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
November 02, 2023 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : vlc
CVE ID : not yet available

An out-of-bounds write was discovered in the MMS demuxer of the VLC media
player.

For the oldstable distribution (bullseye), this problem has been fixed
in version 3.0.20-0+deb11u1.

For the stable distribution (bookworm), this problem has been fixed in
version 3.0.20-0+deb12u1.

We recommend that you upgrade your vlc packages.

For the detailed security status of vlc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/vlc

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=5Fzr
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5545-1] vlc security update, Moritz Muehlenhoff, 02.11.2023

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang