shield Security update for gstreamer-plugins-bad

SUSE-SLE-DESKTOP-12-SP2-2016-1933

This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes: - Check an integer overflow (CVE-2016-9445) and initialize a buffer (CVE-2016-9446) in vmncdec. (bsc#1010829) - CVE-2016-9809: Ensure codec_data has the right size when reading number of SPS (bsc#1013659). - CVE-2016-9812: Add more section size checks (bsc#1013678). - CVE-2016-9813: fix PAT parsing (bsc#1013680).

• Release Date
  Dec 29 2016
• References
  Bugzilla: 1010829, 1013659, 1013678, 1013680
  CVEs: CVE-2016-9446, CVE-2016-9445, CVE-2016-9809, CVE-2016-9812, CVE-2016-9813
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm lock src

  gstreamer-plugins-bad-lang
  Languages for package gstreamer-plugins-bad

  1.8.3-14.1 lock rpm

  libgstadaptivedemux-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstbadaudio-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstbadbase-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstbadvideo-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstbasecamerabinsrc-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstcodecparsers-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstgl-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstmpegts-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstphotography-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgsturidownloader-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm