Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
198

Arch Linux ASA-202101-35 Medium: CVE-2020-26664 VLC Code Execution

The package vlc before version 3.0.12-1 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-202101-35 ========================================= Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2020-26664 Package : vlc Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1423 Summary ====== The package vlc before version 3.0.12-1 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 3.0.12-1. # pacman -Syu "vlc> =3.0.12-1" The problem has been fixed upstream in version 3.0.12. Workaround ========= None. Description ========== A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. It is fixed in version 3.0.12. Impact ===== A crafted .mkv file can crash or possibly execute arbitrary code. References ========= https://gist.githubusercontent.com/henices/db11664dd45b9f322f8514d182aef5ea/raw/d56940c8bf211992bf4f3309a85bb2b69383e511/CVE-2020-26664.txt https://code.videolan.org/videolan/vlc-3.0/-/commit/ec1f55ee9ace5cc675395a1bc9700d99679e7e8c https://security.archlinux.org/CVE-2020-26664 . Debian Linux Security Notice DSA-2021-001 Severity: Medium Date: 2021-01-21 CVE-ID: CVE-2020-26788.. Arbitrary Code Execution,VLC Package,Arch Linux Advisory. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Jan 28, 2021 Medium ArchLinux
202

openSUSE: 2021:0122-1 Crucial Update for VLC Heap Overflow Security Issue

An update that solves two vulnerabilities and has one errata is now available. . openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0122-1 Rating: important References: #1133290 #1172727 #1180755 Cross-References: CVE-2020-13428 CVE-2020-26664 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for vlc fixes the following issues: Update to 3.0.11.1: - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxx_AnnexB_to_xVC () (boo#1172727) - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send () (boo#1180755) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-122=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libvlc5-3.0.11.1-bp152.2.9.1 libvlccore9-3.0.11.1-bp152.2.9.1 vlc-3.0.11.1-bp152.2.9.1 vlc-codec-gstreamer-3.0.11.1-bp152.2.9.1 vlc-devel-3.0.11.1-bp152.2.9.1 vlc-jack-3.0.11.1-bp152.2.9.1 vlc-noX-3.0.11.1-bp152.2.9.1 vlc-opencv-3.0.11.1-bp152.2.9.1 vlc-qt-3.0.11.1-bp152.2.9.1 vlc-vdpau-3.0.11.1-bp152.2.9.1 - openSUSE Backports SLE-15-SP2 (noarch): vlc-lang-3.0.11.1-bp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-13428.html https://www.suse.com/security/cve/CVE-2020-26664.html https://bugzilla.suse.com/1133290 https://bugzilla.suse.com/1172727 https://bugzilla.suse.com/1180755 . Crucial openSUSE security patch tackles vulnerabilities in VLC with essential update guidelines.. openSUSE Security,VLC Patch,Buffer Overflow Fix,Software Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 20, 2021 Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here