Friendly heads-up: Upstream is tracking this at https://trac.videolan.org/vlc/ticket/22474 They believe that the root cause is in libebml rather than vlc, and a newer release of this library fixes the bug.
HTH,
- Bug#932241: vlc: CVE-2019-13615 Salvatore Bonaccorso
- Processed: vlc: CVE-2019-13615 Debian Bug Tracking System
- Bug#932241: vlc: CVE-2019-13615 Sebastian Ramacher
- Bug#932241: vlc: CVE-2019-13615 Salvatore Bonaccorso
- Bug#932241: vlc: CVE-2019-13615 Jonathan Brandmeyer
- Bug#932241: patch for CVE-2019-13615 Christopher Wellons
- Bug#932241: marked as done (libebml: CVE-2... Debian Bug Tracking System
