gpp_maybe Security update for gstreamer-plugins-bad, libvpl

SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3289

This update for gstreamer-plugins-bad, libvpl fixes the following issues: - Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899) * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900) * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901) The libmfx dependency is replaced by libvpl.

• Release Date
  Sep 17 2024
• References
  Bugzilla: 1226901, 1223263, 1226900, 1226898, 1226892, 1218534, 1226899, 1226897, 1219494
  CVEs: CVE-2023-22656, CVE-2023-50186, CVE-2023-45221, CVE-2023-47169, CVE-2023-48368, CVE-2023-47282
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.6 x86_64

• Packages
  libvpl
  oneAPI Video Processing Library (oneVPL) dispatcher, tools, and examples

  2023.0.0-150500.3.2.1 lock rpm lock src

  libvpl-devel
  Development files for oneAPI Video Processing Library (oneVPL) dispatcher

  2023.0.0-150500.3.2.1 lock rpm

  libvpl2
  oneAPI Video Processing Library (oneVPL) dispatcher

  2023.0.0-150500.3.2.1 lock rpm