{"id":"openSUSE-SU-2019:1897-1","summary":"Security update for vlc","details":"This update for vlc to version 3.0.7.1 fixes the following issues:\n\nSecurity issues fixed:\n\t  \n- CVE-2019-5439: Fixed a buffer overflow (bsc#1138354).\n- CVE-2019-5459: Fixed an integer underflow (bsc#1143549).\n- CVE-2019-5460: Fixed a double free (bsc#1143547).\n- CVE-2019-12874: Fixed a double free in zlib_decompress_extra in modules/demux/mkv/util.cpp (bsc#1138933).\n- CVE-2019-13602: Fixed an integer underflow in mp4 demuxer (boo#1141522).\n- CVE-2019-13962: Fixed a heap-based buffer over-read in avcodec (boo#1142161).\n\nNon-security issues fixed:\n\n- Video Output:\n  * Fix hardware acceleration with some AMD drivers\n  * Improve direct3d11 HDR support\n- Access:\n  * Improve Blu-ray support\n- Audio output:\n  * Fix pass-through on Android-23\n  * Fix DirectSound drain\n- Demux: Improve MP4 support\n- Video Output:\n  * Fix 12 bits sources playback with Direct3D11\n  * Fix crash on iOS\n  * Fix midstream aspect-ratio changes when Windows hardware decoding is on\n  * Fix HLG display with Direct3D11\n- Stream Output: Improve Chromecast support with new ChromeCast apps\n- Misc:\n  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts\n  * Work around busy looping when playing an invalid item with loop enabled\n- Updated translations.\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","modified":"2026-03-11T07:32:11.554552Z","published":"2019-08-15T08:55:15Z","related":["CVE-2018-19857","CVE-2019-12874","CVE-2019-13602","CVE-2019-13962","CVE-2019-5439","CVE-2019-5459","CVE-2019-5460"],"upstream":["CVE-2018-19857","CVE-2019-12874","CVE-2019-13602","CVE-2019-13962","CVE-2019-5439","CVE-2019-5459","CVE-2019-5460"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BZ6PVIORM3E3KCDWEJP6ZSJVHTRTXT2M/#BZ6PVIORM3E3KCDWEJP6ZSJVHTRTXT2M"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118586"},{"type":"REPORT","url":"https://bugzilla.suse.com/1138354"},{"type":"REPORT","url":"https://bugzilla.suse.com/1138933"},{"type":"REPORT","url":"https://bugzilla.suse.com/1141522"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142161"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143547"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143549"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-19857"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-12874"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-13602"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-13962"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-5439"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-5459"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-5460"}],"affected":[{"package":{"name":"vlc","ecosystem":"SUSE:Package Hub 15 SP1","purl":"pkg:rpm/suse/vlc&distro=SUSE%20Package%20Hub%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7.1-bp151.5.3.3"}]}],"ecosystem_specific":{"binaries":[{"libvlccore9":"3.0.7.1-bp151.5.3.3","vlc-codec-gstreamer":"3.0.7.1-bp151.5.3.3","vlc-devel":"3.0.7.1-bp151.5.3.3","vlc-jack":"3.0.7.1-bp151.5.3.3","vlc-lang":"3.0.7.1-bp151.5.3.3","vlc-noX":"3.0.7.1-bp151.5.3.3","vlc-qt":"3.0.7.1-bp151.5.3.3","vlc-vdpau":"3.0.7.1-bp151.5.3.3","vlc":"3.0.7.1-bp151.5.3.3","libvlc5":"3.0.7.1-bp151.5.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1897-1.json"}}],"schema_version":"1.7.5"}