[ glsa 201603-08 ] vlc

[GLSA]

Gentoo Linux Security Advisory

Title: VLC: Multiple vulnerabilities (GLSA 201603-08)
Severity: normal
Exploitable: remote
Date: March 12, 2016
Bug(s): #534532, #537154, #542222, #558418
ID: 201603-08

Synopsis

Multiple vulnerabilities have been found in VLC allowing remote
attackers to execute arbitrary code or cause Denial of Service.


Background

VLC is a cross-platform media player and streaming server.

Affected Packages

Package: media-video/vlc
Vulnerable: < 2.2.1-r1
Unaffected: >= 2.2.1-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in VLC. Please review the
CVE identifiers referenced below for details.


Impact

Remote attackers could possibly execute arbitrary code or cause Denial
of Service.


Workaround

There is no known work around at this time.

Resolution

All VLC users should upgrade to the latest version: