This bug was fixed in the package vlc - 2.0.8-0ubuntu0.12.10.1 --------------- vlc (2.0.8-0ubuntu0.12.10.1) quantal-security; urgency=low
* New bug-fixing upstream release (LP: #1186780). * SECURITY UPDATE: Denial of service (crash) and possibly execute arbitrary code via a crafted MKV file (disputed). - Improve resistance and checking against malformed MKV files. - CVE-2013-3245 * SECURITY UPDATE: Two xss vulnerabilities. - CVE-2013-3565 * SECURITY UPDATE: Buffer Overflow in ASF Demuxer. - CVE-2013-1954 - VideoLAN-SA-1302 -- Benjamin Drung <bdr...@ubuntu.com> Thu, 01 Aug 2013 14:41:36 +0200 ** Changed in: vlc (Ubuntu Raring) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186780 Title: Please update VLC (for security issues) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1186780/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs