The manufacturer Canonical has not yet set up its devicebase profile. Content such as updates, compatibilities and support may only be maintained with a delay.

Update01/30/2025

USN-7243-1: VLC vulnerability

Ubuntu Desktop
Canonical

Update from:
patrick-devicebase (expert)

USN-7243-1: VLC vulnerability
30 January 2025

VLC could be made to crash or run programs if it received specially crafted network traffic.

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages
vlc - multimedia player and streamer

Details
It was discovered that VLC incorrectly handled memory when reading an MMS
stream. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04
vlc - 3.0.20-3ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

More updates To the product