Beware of Subtitles,. (Kodi, VLC etc)

Forumite Members › General Topics › Tech › Security Talk › Beware of Subtitles,. (Kodi, VLC etc)

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • May 25, 2017 at 3:27 pm #7904
    Ed PEd P
    Participant
      @edps
      Forumite Points: 39

      The link pretty much says it all, but there are more details on HelpNetSecurity.

      Affected software has fixed the problem in updates so make sure that you are updated.

       

      May 25, 2017 at 6:49 pm #7924
      RichardRichard
      Participant
        @sawboman
        Forumite Points: 16

        VLC did not update the software when asked to check, it simply reported ‘no updates’ available. I had to download a newer version. I do not know if this was definitely suspect but it was a concern that an old version was not specifically updated when there is a newer version available so it was a surprise.

        May 25, 2017 at 7:02 pm #7926
        The DukeThe Duke
        Participant
          @sgb101
          Forumite Points: 5

          Beware of youtube subtitles. They are just too funny.

          May 25, 2017 at 7:02 pm #7927
          Ed PEd P
          Participant
            @edps
            Forumite Points: 39

            Sorry Richard I do not know why you got that response. The following is the response I got in a Windows VM. It appears to fix the issues. I do not use Kodi so I cannot comment on that at all.

            VideoLAN and the VLC development team present VLC 2.2.6 “Umbrella”.
            VLC 2.2.6 is a security update fixing issues with subtitles and other formats, and improving DLL-loading security. VLC media

            As reported in the other thread I did have to do a dist-upgrade in Raspbian for the Pi.

            May 25, 2017 at 7:22 pm #7931
            Ed PEd P
            Participant
              @edps
              Forumite Points: 39

              Just checked Mint – as usual they are very tardy with security updates — Mint’s biggest failing. The Mint repository is only on 2.2.2 maybe using Mint should carry a security warning! Pi is a wee bit better at 2.2.5 but I’ll still need to keep an eye on it. It is not a big issue for me as I never use sub-titles.

              May 25, 2017 at 8:26 pm #7933
              Ed PEd P
              Participant
                @edps
                Forumite Points: 39

                I was actually unfair on Mint it devolves back to Ubuntu. If you want to fix it you need to use a ppa.

                sudo add-apt-repository ppa:videolan/master-daily

                then upgrade

                sudo apt-get update && sudo apt-get install vlc

                Do this and vlc moves to version 3.0.0 Vetinari

                 

                May 25, 2017 at 10:33 pm #7938
                RichardRichard
                Participant
                  @sawboman
                  Forumite Points: 16

                  Having done a forced manual update a day or so back it did an automatic one tonight. I guess it is a bit fussy and cantankerous. Bottom line, take care all is not what it might appear, check recheck and check again.

                  May 26, 2017 at 10:00 am #7952
                  The DukeThe Duke
                  Participant
                    @sgb101
                    Forumite Points: 5

                    @ed, because they are!

                    May 26, 2017 at 1:10 pm #7964
                    TCBarrettTCBarrett
                    Participant
                      @tcbarrett
                      Forumite Points: 2

                      Hmm..

                      Family. Coffee. CrossFit. WordPress. にほんご。

                    • Author
                      Posts
                    Viewing 9 posts - 1 through 9 (of 9 total)
                    • You must be logged in to reply to this topic.