gpp_maybe Security update for gstreamer-plugins-bad

SUSE-SLE-SERVER-12-SP2-2016-1932

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2016-9809: Malicious mkv/h264 file could cause an off by one out of bounds read and lead to crash (bsc#1013659) - CVE-2016-9812: Malicious mpeg file could cause invalid a null pointer access and lead to crash (bsc#1013678) - CVE-2016-9813: Malicious mpegts file could cause invalid a null pointer access and lead to crash (bsc#1013680) - CVE-2016-9445, CVE-2016-9446: Check an integer overflow and initialize a buffer in vmncdec (bsc#1010829)

• Release Date
  Dec 29 2016
• References
  Bugzilla: 1013680, 1013678, 1010829, 1013659
  CVEs: CVE-2016-9809, CVE-2016-9813, CVE-2016-9812, CVE-2016-9446, CVE-2016-9445
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock src

  libgstegl-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock src

  libgstegl-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock src

  libgstegl-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  gstreamer-plugins-bad
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock src

  libgstegl-1_0-0
  GStreamer Streaming-Media Framework Plug-Ins

  1.2.4-3.4.1 lock rpm