Lucene search
SuseOPENSUSE-SU-2019:0058-1HistoryJan 18, 2019 - 12:00 a.m.
Security update for live555 (moderate)
2019-01-1800:00:00
lists.opensuse.org
150
EPSS
0.003
Percentile
69.7%
An update that fixes two vulnerabilities is now available.
Description:
This update fixes two security issues in live555:
- CVE-2018-4013: Remote code execution vulnerability (bsc#1114779)
- CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via
x-sessioncookie HTTP headers (boo#1121892)
This library is statically linked into VLC. However VLC is not affected
because it only uses the live555 library to implement the RTSP client.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 42.3:
zypper in -t patch openSUSE-2019-58=1
-
openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-58=1
-
openSUSE Backports SLE-15:
zypper in -t patch openSUSE-2019-58=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 42.3 | i586 | < - openSUSE Leap 42.3 (i586 x86_64): | - openSUSE Leap 42.3 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 42.3 | x86_64 | < - openSUSE Leap 42.3 (i586 x86_64): | - openSUSE Leap 42.3 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.0 | x86_64 | < - openSUSE Leap 15.0 (x86_64): | - openSUSE Leap 15.0 (x86_64):.x86_64.rpm | |
| openSUSE Backports SLE | 15 | aarch64 | < openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): | - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.aarch64.rpm | |
| openSUSE Backports SLE | 15 | ppc64le | < openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): | - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm | |
| openSUSE Backports SLE | 15 | s390x | < openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): | - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.s390x.rpm | |
| openSUSE Backports SLE | 15 | x86_64 | < openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): | - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.x86_64.rpm |
Related
openvas
openvas
openSUSE: Security Advisory for live555 (openSUSE-SU-2019:0058-1)
2019-01-18 00:00:00
Ubuntu: Security Advisory (USN-4853-1)
2023-01-27 00:00:00
Debian: Security Advisory (DLA-1582-1)
2018-11-20 00:00:00
nessus
nessus
openSUSE Security Update : live555 (openSUSE-2019-58)
2019-01-22 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM : liveMedia vulnerabilities (USN-4853-1)
2023-10-21 00:00:00
Debian DLA-1582-1 : liblivemedia security update
2018-11-21 00:00:00
osv
osv
liblivemedia vulnerabilities
2021-03-15 22:39:54
liblivemedia - security update
2018-11-23 00:00:00
liblivemedia - security update
2018-11-20 00:00:00
ubuntu
ubuntu
liveMedia vulnerabilities
2021-03-15 00:00:00
nvd
nvd
CVE-2019-6256
2019-01-14 08:29:00
CVE-2018-4013
2018-10-19 13:29:00
cvelist
cvelist
CVE-2019-6256
2019-01-14 07:00:00
CVE-2018-4013
2018-10-19 13:00:00
debiancve
debiancve
CVE-2019-6256
2019-01-14 08:29:00
CVE-2018-4013
2018-10-19 13:29:00
ubuntucve
ubuntucve
CVE-2019-6256
2019-01-14 00:00:00
CVE-2018-4013
2018-10-19 00:00:00
prion
prion
Design/Logic Flaw
2019-01-14 08:29:00
Stack overflow
2018-10-19 13:29:00
cve
cve
CVE-2019-6256
2019-01-14 08:29:00
CVE-2018-4013
2018-10-19 13:29:00
threatpost
threatpost
debian
debian
[SECURITY] [DLA 1582-1] liblivemedia security update
2018-11-20 21:19:57
[SECURITY] [DSA 4343-1] liblivemedia security update
2018-11-23 19:05:17
[SECURITY] [DLA 1690-1] liblivemedia security update
2019-02-26 11:51:37
freebsd
freebsd
liveMedia -- potential remote code execution
2018-10-18 00:00:00
thn
thn
Critical Code Execution Flaw Found in LIVE555 Streaming Library
2018-10-19 14:12:00
kitploit
kitploit
Functrace - A Function Tracer
2019-12-08 11:00:00
hackread
hackread
LIVE555 media streaming library hit by remote code execution flaw
2018-10-20 19:40:29
talosblog
talosblog
talos
talos
gentoo
gentoo
LIVE555 Media Server: Multiple vulnerabilities
2020-05-14 00:00:00
mageia
mageia
Updated live, ffmpeg, mplayer, and vlc packages fix security vulnerabilities
2019-01-10 13:53:49