Mageia alert MGASA-2012-0333 (vlc)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0333: vlc-2.0.3-2.2.mga2 (2/core,
 tainted) 
Date:
    	     
 
Wed, 21 Nov 2012 20:50:33 +0100
Message-ID:
    	     
 
<20121121195033.GA31777@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0333
Date: 	November 21st, 2012
Affected releases: 	2


Description:
Updated vlc packages fix security vulnerability:

libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers
to cause a denial of service (application crash) via a crafted PNG file
(CVE-2012-5470).


Updated Packages:
lib(64)vlc5-2.0.3-2.2.mga2
lib(64)vlccore5-2.0.3-2.2.mga2
lib(64)vlc-devel-2.0.3-2.2.mga2
svlc-2.0.3-2.2.mga2
vlc-2.0.3-2.2.mga2
vlc-plugin-aa-2.0.3-2.2.mga2
vlc-plugin-bonjour-2.0.3-2.2.mga2
vlc-plugin-common-2.0.3-2.2.mga2
vlc-plugin-dv-2.0.3-2.2.mga2
vlc-plugin-flac-2.0.3-2.2.mga2
vlc-plugin-fluidsynth-2.0.3-2.2.mga2
vlc-plugin-gme-2.0.3-2.2.mga2
vlc-plugin-gnutls-2.0.3-2.2.mga2
vlc-plugin-jack-2.0.3-2.2.mga2
vlc-plugin-kate-2.0.3-2.2.mga2
vlc-plugin-libass-2.0.3-2.2.mga2
vlc-plugin-libnotify-2.0.3-2.2.mga2
vlc-plugin-lirc-2.0.3-2.2.mga2
vlc-plugin-lua-2.0.3-2.2.mga2
vlc-plugin-mod-2.0.3-2.2.mga2
vlc-plugin-mpc-2.0.3-2.2.mga2
vlc-plugin-ncurses-2.0.3-2.2.mga2
vlc-plugin-opengl-2.0.3-2.2.mga2
vlc-plugin-projectm-2.0.3-2.2.mga2
vlc-plugin-pulse-2.0.3-2.2.mga2
vlc-plugin-schroedinger-2.0.3-2.2.mga2
vlc-plugin-sdl-2.0.3-2.2.mga2
vlc-plugin-shout-2.0.3-2.2.mga2
vlc-plugin-speex-2.0.3-2.2.mga2
vlc-plugin-theora-2.0.3-2.2.mga2
vlc-plugin-twolame-2.0.3-2.2.mga2
vlc-plugin-upnp-2.0.3-2.2.mga2
vlc-plugin-zvbi-2.0.3-2.2.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5470
http://www.videolan.org/security/sa1203.html
https://bugs.mageia.org/show_bug.cgi?id=8048
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...