| Summary: | vlc new security issues CVE-2014-962[5-9] and CVE-2014-9630 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | sysadmin-bugs, wilcal.int |
| Version: | 4 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/631497/ | ||
| Whiteboard: | advisory MGA4-32-OK MGA4-64-OK | ||
| Source RPM: | vlc-2.1.5-1.mga4.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2015-02-03 18:35:37 CET
LWN reference for CVE-2014-9625: http://lwn.net/Vulnerabilities/631651/ In VirtualBox, M4, KDE, 32-bit I think this is the most common setup of VLC: Package(s) under test: vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp libvlc5 libvlccore7 default install of vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp libvlc5 libvlccore7 [root@localhost wilcal]# urpmi vlc Package vlc-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi svlc Package svlc-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-common Package vlc-plugin-common-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-pulse Package vlc-plugin-pulse-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-theora Package vlc-plugin-theora-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-upnp Package vlc-plugin-upnp-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi libvlc5 Package libvlc5-2.1.5-1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi libvlccore7 Package libvlccore7-2.1.5-1.mga4.tainted.i586 is already installed I can play audio & video files from my local UPnP server. install vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp libvlc5 libvlccore7 from updates_testing [root@localhost wilcal]# urpmi vlc Package vlc-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi svlc Package svlc-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-common Package vlc-plugin-common-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-pulse Package vlc-plugin-pulse-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-theora Package vlc-plugin-theora-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi vlc-plugin-upnp Package vlc-plugin-upnp-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi libvlc5 Package libvlc5-2.1.5-1.1.mga4.tainted.i586 is already installed [root@localhost wilcal]# urpmi libvlccore7 Package libvlccore7-2.1.5-1.1.mga4.tainted.i586 is already installed I can play audio & video files from my local UPnP server. Test platform: Intel Core i7-2600K Sandy Bridge 3.4GHz GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB RTL8111/8168B PCI Express 1Gbit Ethernet DRAM 16GB (4 x 4GB) Mageia 4 64-bit, Nvidia driver virtualbox-4.3.10-1.1.mga4.x86_64 virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64 CC:
(none) =>
wilcal.int In VirtualBox, M4, KDE, 64-bit I think this is the most common setup of VLC: Package(s) under test: vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp lib64vlc5 lib64vlccore7 default install of vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp lib64vlc5 lib64vlccore7 [root@localhost wilcal]# urpmi vlc Package vlc-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi svlc Package svlc-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-common Package vlc-plugin-common-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-pulse Package vlc-plugin-pulse-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-theora Package vlc-plugin-theora-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-upnp Package vlc-plugin-upnp-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi lib64vlc5 Package lib64vlc5-2.1.5-1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi lib64vlccore7 Package lib64vlccore7-2.1.5-1.mga4.tainted.x86_64 is already installed I can play audio & video files from my local UPnP server. install vlc svlc vlc-plugin-common vlc-plugin-pulse vlc-plugin-theora vlc-plugin-upnp lib64vlc5 lib64vlccore7 from updates_testing [root@localhost wilcal]# urpmi vlc Package vlc-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi svlc Package svlc-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-common Package vlc-plugin-common-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-pulse Package vlc-plugin-pulse-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-theora Package vlc-plugin-theora-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi vlc-plugin-upnp Package vlc-plugin-upnp-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi lib64vlc5 Package lib64vlc5-2.1.5-1.1.mga4.tainted.x86_64 is already installed [root@localhost wilcal]# urpmi lib64vlccore7 Package lib64vlccore7-2.1.5-1.1.mga4.tainted.x86_64 is already installed I can play audio & video files from my local UPnP server. Test platform: Intel Core i7-2600K Sandy Bridge 3.4GHz GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB RTL8111/8168B PCI Express 1Gbit Ethernet DRAM 16GB (4 x 4GB) Mageia 4 64-bit, Nvidia driver virtualbox-4.3.10-1.1.mga4.x86_64 virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64 I'm going to validate this bug in 24-hours in case someone else wants to do some testing. This update works fine. Testing complete for mga4 32-bit & 64-bit Validating the update. Could someone from the sysadmin team push this to updates. Thanks Keywords:
(none) =>
validated_update Advisory uploaded. Remembered to add the vlc-2.1.5-1.1.mga4.tainted srpm too \o/ Whiteboard:
MGA4-32-OK MGA4-64-OK =>
advisory MGA4-32-OK MGA4-64-OK An update for this issue has been pushed to Mageia Updates repository. http://advisories.mageia.org/MGASA-2015-0053.html Status:
NEW =>
RESOLVED |