MGASA-2012-0333
| Date: | November 21st, 2012 |
| Affected releases: | 2 |
Description:
Updated vlc packages fix security vulnerability:
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers
to cause a denial of service (application crash) via a crafted PNG file
(CVE-2012-5470).
Updated Packages:
lib(64)vlc5-2.0.3-2.2.mga2
lib(64)vlccore5-2.0.3-2.2.mga2
lib(64)vlc-devel-2.0.3-2.2.mga2
svlc-2.0.3-2.2.mga2
vlc-2.0.3-2.2.mga2
vlc-plugin-aa-2.0.3-2.2.mga2
vlc-plugin-bonjour-2.0.3-2.2.mga2
vlc-plugin-common-2.0.3-2.2.mga2
vlc-plugin-dv-2.0.3-2.2.mga2
vlc-plugin-flac-2.0.3-2.2.mga2
vlc-plugin-fluidsynth-2.0.3-2.2.mga2
vlc-plugin-gme-2.0.3-2.2.mga2
vlc-plugin-gnutls-2.0.3-2.2.mga2
vlc-plugin-jack-2.0.3-2.2.mga2
vlc-plugin-kate-2.0.3-2.2.mga2
vlc-plugin-libass-2.0.3-2.2.mga2
vlc-plugin-libnotify-2.0.3-2.2.mga2
vlc-plugin-lirc-2.0.3-2.2.mga2
vlc-plugin-lua-2.0.3-2.2.mga2
vlc-plugin-mod-2.0.3-2.2.mga2
vlc-plugin-mpc-2.0.3-2.2.mga2
vlc-plugin-ncurses-2.0.3-2.2.mga2
vlc-plugin-opengl-2.0.3-2.2.mga2
vlc-plugin-projectm-2.0.3-2.2.mga2
vlc-plugin-pulse-2.0.3-2.2.mga2
vlc-plugin-schroedinger-2.0.3-2.2.mga2
vlc-plugin-sdl-2.0.3-2.2.mga2
vlc-plugin-shout-2.0.3-2.2.mga2
vlc-plugin-speex-2.0.3-2.2.mga2
vlc-plugin-theora-2.0.3-2.2.mga2
vlc-plugin-twolame-2.0.3-2.2.mga2
vlc-plugin-upnp-2.0.3-2.2.mga2
vlc-plugin-zvbi-2.0.3-2.2.mga2
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5470
http://www.videolan.org/security/sa1203.html
https://bugs.mageia.org/show_bug.cgi?id=8048
