gpp_maybe Security update for gstreamer-plugins-bad, libvpl

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3289

This update for gstreamer-plugins-bad, libvpl fixes the following issues: - Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899) * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900) * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901) The libmfx dependency is replaced by libvpl.

• Release Date
  Sep 17 2024
• References
  Bugzilla: 1226901, 1223263, 1226900, 1226898, 1226892, 1218534, 1226899, 1226897, 1219494
  CVEs: CVE-2023-22656, CVE-2023-50186, CVE-2023-45221, CVE-2023-47169, CVE-2023-48368, CVE-2023-47282
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.5 aarch64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.22.0-150500.3.25.2 lock src

  libgsttranscoder-1_0-0
  GStreamer Transcoder API

  1.22.0-150500.3.25.2 lock rpm

SUSE Package Hub 15.5 ppc64le

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.22.0-150500.3.25.2 lock src

  libgsttranscoder-1_0-0
  GStreamer Transcoder API

  1.22.0-150500.3.25.2 lock rpm

SUSE Package Hub 15.5 s390x

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.22.0-150500.3.25.2 lock src

  libgsttranscoder-1_0-0
  GStreamer Transcoder API

  1.22.0-150500.3.25.2 lock rpm

SUSE Package Hub 15.5 x86_64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.22.0-150500.3.25.2 lock src

  libgsttranscoder-1_0-0
  GStreamer Transcoder API

  1.22.0-150500.3.25.2 lock rpm