shield Security update for gstreamer-plugins-bad

SUSE-SLE-SDK-12-SP2-2016-1933

This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes: - Check an integer overflow (CVE-2016-9445) and initialize a buffer (CVE-2016-9446) in vmncdec. (bsc#1010829) - CVE-2016-9809: Ensure codec_data has the right size when reading number of SPS (bsc#1013659). - CVE-2016-9812: Add more section size checks (bsc#1013678). - CVE-2016-9813: fix PAT parsing (bsc#1013680).

• Release Date
  Dec 29 2016
• References
  Bugzilla: 1010829, 1013659, 1013678, 1013680
  CVEs: CVE-2016-9446, CVE-2016-9445, CVE-2016-9809, CVE-2016-9812, CVE-2016-9813
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock src

  gstreamer-plugins-bad-devel
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstinsertbin-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgsturidownloader-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock src

  gstreamer-plugins-bad-devel
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstinsertbin-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgsturidownloader-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock src

  gstreamer-plugins-bad-devel
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstinsertbin-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgsturidownloader-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock src

  gstreamer-plugins-bad-devel
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgstinsertbin-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm

  libgsturidownloader-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.8.3-14.1 lock rpm