{"id":"openSUSE-SU-2021:0691-1","summary":"Security update for vlc","details":"This update for vlc fixes the following issues:\n\nUpdate to version 3.0.13:\n\n  + Demux:\n\n    - Adaptive: fix artefacts in HLS streams with wrong profiles/levels\n    - Fix regression on some MP4 files for the audio track\n    - Fix MPGA and ADTS probing in TS files\n    - Fix Flac inside AVI files\n    - Fix VP9/Webm artefacts when seeking\n\n  + Codec:\n\n    - Support SSA text scaling\n    - Fix rotation on Android rotation\n    - Fix WebVTT subtitles that start at 00:00\n\n  + Access:\n\n    - Update libnfs to support NFSv4\n    - Improve SMB2 integration\n    - Fix Blu-ray files using Unicode names on Windows\n    - Disable mcast lookups on Android for RTSP playback\n\n  + Video Output: Rework the D3D11 rendering wait, to fix\n    choppiness on display\n  + Interfaces:\n\n    - Fix VLC getting stuck on close on X11 (#21875)\n    - Improve RTL on preferences on macOS\n    - Add mousewheel horizontal axis control\n    - Fix crash on exit on macOS\n    - Fix sizing of the fullscreen controls on macOS\n\n  + Misc:\n\n    - Improve MIDI fonts search on Linux\n    - Update Soundcloud, Youtube, liveleak\n    - Fix compilation with GCC11\n    - Fix input-slave option for subtitles\n  + Updated translations.\n\nUpdate to version 3.0.12:\n\n  + Access: Add new RIST access module compliant with simple\n    profile (VSF_TR-06-1).\n  + Access Output: Add new RIST access output module compliant with\n    simple profile (VSF_TR-06-1).\n  + Demux: Fixed adaptive's handling of resolution settings.\n  + Audio output: Fix audio distortion on macOS during start of\n    playback.\n  + Video Output: Direct3D11: Fix some potential crashes when using\n    video filters.\n  + Misc:\n\n    - Several fixes in the web interface, including privacy and\n      security improvements\n    - Update YouTube and Vocaroo scripts.\n\n  + Updated translations.\n","modified":"2026-03-11T07:33:01.672654Z","published":"2021-05-08T22:05:51Z","related":["CVE-2020-26664"],"upstream":["CVE-2020-26664"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6NFAANEHTTDAXZIGCXPSKGYDFZDQ3HMF/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181918"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-26664"}],"affected":[{"package":{"name":"vlc","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/vlc&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-lp152.2.12.1"}]}],"ecosystem_specific":{"binaries":[{"libvlc5":"3.0.13-lp152.2.12.1","libvlccore9":"3.0.13-lp152.2.12.1","vlc-codec-gstreamer":"3.0.13-lp152.2.12.1","vlc-lang":"3.0.13-lp152.2.12.1","vlc-noX":"3.0.13-lp152.2.12.1","vlc-qt":"3.0.13-lp152.2.12.1","vlc-devel":"3.0.13-lp152.2.12.1","vlc-jack":"3.0.13-lp152.2.12.1","vlc-opencv":"3.0.13-lp152.2.12.1","vlc-vdpau":"3.0.13-lp152.2.12.1","vlc":"3.0.13-lp152.2.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0691-1.json"}}],"schema_version":"1.7.5"}