gpp_maybe Security update for gstreamer-plugins-base

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-65

This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed a stack-buffer overflow in vorbis_handle_identification_packet. (bsc#1234415) - CVE-2024-47835: Fixed a NULL-pointer dereference in LRC subtitle parser. (bsc#1234450) - CVE-2024-47600: Fixed an out-of-bounds read in gst-discoverer-1.0 commandline tool. (bsc#1234453) - CVE-2024-47615: Fixed an out-of-bounds write in Ogg demuxer. (bsc#1234456) - CVE-2024-47541: Fixed an out-of-bounds write in SSA subtitle parser. (bsc#1234459) - CVE-2024-47542: Fixed an ID3v2 parser out-of-bounds read and NULL-pointer dereference. (bsc#1234460) - CVE-2024-47607: Fixed a stack buffer-overflow in Opus decoder. (bsc#1234455)

• Release Date
  Jan 10 2025
• References
  Bugzilla: 1234453, 1234460, 1234450, 1234459, 1234415, 1234456, 1234455
  CVEs: CVE-2024-47600, CVE-2024-47615, CVE-2024-47538, CVE-2024-47835, CVE-2024-47542, CVE-2024-47541, CVE-2024-47607
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.6 x86_64

• Packages
  gstreamer-plugins-base
  GStreamer Streaming-Media Framework Plug-Ins

  1.24.0-150600.3.8.1 lock src

  libgstaudio-1_0-0-32bit
  GStreamer Streaming-Media Framework Plug-Ins

  1.24.0-150600.3.8.1 lock rpm

  libgsttag-1_0-0-32bit
  GStreamer Streaming-Media Framework Plug-Ins

  1.24.0-150600.3.8.1 lock rpm

  libgstvideo-1_0-0-32bit
  GStreamer Streaming-Media Framework Plug-Ins

  1.24.0-150600.3.8.1 lock rpm