USN-6783-1: VLC vulnerabilities

Releases

• Ubuntu 23.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• vlc - multimedia player and streamer

Details

It was discovered that VLC incorrectly handled certain media files.
A remote attacker could possibly use this issue to cause VLC to crash,
resulting in a denial of service, or potential arbitrary code execution.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.10

• vlc - 3.0.18-4ubuntu0.1
• vlc-plugin-base - 3.0.18-4ubuntu0.1

Ubuntu 22.04

• vlc - 3.0.16-1ubuntu0.1~esm2
  Available with Ubuntu Pro
• vlc-plugin-base - 3.0.16-1ubuntu0.1~esm2
  Available with Ubuntu Pro

Ubuntu 20.04

• vlc - 3.0.9.2-1ubuntu0.1~esm2
  Available with Ubuntu Pro
• vlc-plugin-base - 3.0.9.2-1ubuntu0.1~esm2
  Available with Ubuntu Pro

Ubuntu 18.04

• vlc - 3.0.8-0ubuntu18.04.1+esm2
  Available with Ubuntu Pro
• vlc-plugin-base - 3.0.8-0ubuntu18.04.1+esm2
  Available with Ubuntu Pro

Ubuntu 16.04

• vlc - 2.2.2-5ubuntu0.16.04.5+esm3
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-47360
• CVE-2023-47359