I forgot to say it affects VLC version 0.7.0 to O.8.6. So all version in Ubuntu are concerned.
** Tags added: patch security -- URL format string injection in CDDA and VCDX plugins https://launchpad.net/bugs/78610 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs