Multiple vulnerabilities have been found in VLC allowing remote attackers to execute arbitrary code or cause Denial of Service.
Package | media-video/vlc on all architectures |
---|---|
Affected versions | < 2.2.1-r1 |
Unaffected versions | >= 2.2.1-r1 |
VLC is a cross-platform media player and streaming server.
Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details.
Remote attackers could possibly execute arbitrary code or cause Denial of Service.
There is no known work around at this time.
All VLC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/vlc-2.2.1-r1"