openSUSE Security Update : vlc (openSUSE-SU-2015:0201-1)

Medium Nessus Plugin ID 81199


The remote openSUSE host is missing a security update.


vlc was updated to the current openSUSE Tumbleweed version.

live555 was also updated to the current openSUSE Tumbleweed version as a dependency.

Security issues fixed :

- Fix various buffer overflows and null ptr dereferencing (boo#914268, CVE-2014-9625).

Other fixes :

- Enable SSE2 instruction set for x86_64

- Disable fluidsynth again: the crashes we had earlier are still not all fixed. They are less, but less common makes it more difficult to debug.

On openSUSE 13.1 :

- Update to version 2.1.5 :

+ Core: Fix compilation on OS/2.

+ Access: Stability improvements for the QTSound capture module.

+ Mac OS X audio output :

- Fix channel ordering.

- Increase the buffersize.

+ Decoders :

- Fix DxVA2 decoding of samples needing more surfaces.

- Improve MAD resistance to broken mp3 streams.

- Fix PGS alignment in MKV.

+ Qt Interface: Don't rename mp3 converted files to .raw.

+ Mac OS X Interface :

- Correctly support video-on-top.

- Fix video output event propagation on Macs with retina displays.

- Stability improvements when using future VLC releases side by side.

+ Streaming: Fix transcode when audio format changes.

+ Updated translations.

- Update to version 2.1.4 :

+ Demuxers: Fix issue in WMV with multiple compressed payload and empty payloads.

+ Video Output: Fix subtitles size rendering on Windows.

+ Mac OS X :

- Fix DVD playback regression.

- Fix misleading error message during video playback on OS X 10.9.

- Fix hardware acceleration memleaks.


Update the affected vlc packages.

See Also

Plugin Details

Severity: Medium

ID: 81199

File Name: openSUSE-2015-99.nasl

Version: $Revision: 1.2 $

Type: local

Agent: unix

Published: 2015/02/06

Modified: 2015/03/11

Dependencies: 12634

Risk Information

Risk Factor: Medium

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libvlc5, p-cpe:/a:novell:opensuse:libvlc5-debuginfo, p-cpe:/a:novell:opensuse:libvlccore7, p-cpe:/a:novell:opensuse:libvlccore7-debuginfo, p-cpe:/a:novell:opensuse:live555-devel, p-cpe:/a:novell:opensuse:vlc, p-cpe:/a:novell:opensuse:vlc-debuginfo, p-cpe:/a:novell:opensuse:vlc-debugsource, p-cpe:/a:novell:opensuse:vlc-devel, p-cpe:/a:novell:opensuse:vlc-gnome, p-cpe:/a:novell:opensuse:vlc-gnome-debuginfo, p-cpe:/a:novell:opensuse:vlc-noX, p-cpe:/a:novell:opensuse:vlc-noX-debuginfo, p-cpe:/a:novell:opensuse:vlc-noX-lang, p-cpe:/a:novell:opensuse:vlc-qt, p-cpe:/a:novell:opensuse:vlc-qt-debuginfo, cpe:/o:novell:opensuse:13.1, cpe:/o:novell:opensuse:13.2

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2015/01/26

Reference Information

CVE: CVE-2014-9625