SUSE-SU-2026:2744-1

Опубликовано: 03 июл. 2026

Источник: suse-cvrf

Описание

Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue

CVE-2026-52719: gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (bsc#1268401).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7

libgstphotography-1_0-0-1.24.0-150600.4.6.1

libgstplay-1_0-0-1.24.0-150600.4.6.1

libgstplayer-1_0-0-1.24.0-150600.4.6.1

libgsttranscoder-1_0-0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

gstreamer-plugins-bad-1.24.0-150600.4.6.1

gstreamer-plugins-bad-devel-1.24.0-150600.4.6.1

gstreamer-plugins-bad-lang-1.24.0-150600.4.6.1

libgstadaptivedemux-1_0-0-1.24.0-150600.4.6.1

libgstanalytics-1_0-0-1.24.0-150600.4.6.1

libgstbadaudio-1_0-0-1.24.0-150600.4.6.1

libgstbasecamerabinsrc-1_0-0-1.24.0-150600.4.6.1

libgstcodecparsers-1_0-0-1.24.0-150600.4.6.1

libgstcodecs-1_0-0-1.24.0-150600.4.6.1

libgstcuda-1_0-0-1.24.0-150600.4.6.1

libgstdxva-1_0-0-1.24.0-150600.4.6.1

libgstinsertbin-1_0-0-1.24.0-150600.4.6.1

libgstisoff-1_0-0-1.24.0-150600.4.6.1

libgstmpegts-1_0-0-1.24.0-150600.4.6.1

libgstmse-1_0-0-1.24.0-150600.4.6.1

libgstsctp-1_0-0-1.24.0-150600.4.6.1

libgsturidownloader-1_0-0-1.24.0-150600.4.6.1

libgstva-1_0-0-1.24.0-150600.4.6.1

libgstvulkan-1_0-0-1.24.0-150600.4.6.1

libgstwayland-1_0-0-1.24.0-150600.4.6.1

libgstwebrtc-1_0-0-1.24.0-150600.4.6.1

libgstwebrtcnice-1_0-0-1.24.0-150600.4.6.1

typelib-1_0-CudaGst-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstAnalytics-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstBadAudio-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCodecs-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCuda-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstDxva-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstInsertBin-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMpegts-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMse-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlay-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlayer-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstVa-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstWebRTC-1_0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

libgsttranscoder-1_0-0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Server 15 SP6-LTSS

gstreamer-plugins-bad-1.24.0-150600.4.6.1

gstreamer-plugins-bad-devel-1.24.0-150600.4.6.1

gstreamer-plugins-bad-lang-1.24.0-150600.4.6.1

libgstadaptivedemux-1_0-0-1.24.0-150600.4.6.1

libgstanalytics-1_0-0-1.24.0-150600.4.6.1

libgstbadaudio-1_0-0-1.24.0-150600.4.6.1

libgstbasecamerabinsrc-1_0-0-1.24.0-150600.4.6.1

libgstcodecparsers-1_0-0-1.24.0-150600.4.6.1

libgstcodecs-1_0-0-1.24.0-150600.4.6.1

libgstcuda-1_0-0-1.24.0-150600.4.6.1

libgstdxva-1_0-0-1.24.0-150600.4.6.1

libgstinsertbin-1_0-0-1.24.0-150600.4.6.1

libgstisoff-1_0-0-1.24.0-150600.4.6.1

libgstmpegts-1_0-0-1.24.0-150600.4.6.1

libgstmse-1_0-0-1.24.0-150600.4.6.1

libgstphotography-1_0-0-1.24.0-150600.4.6.1

libgstplay-1_0-0-1.24.0-150600.4.6.1

libgstplayer-1_0-0-1.24.0-150600.4.6.1

libgstsctp-1_0-0-1.24.0-150600.4.6.1

libgsttranscoder-1_0-0-1.24.0-150600.4.6.1

libgsturidownloader-1_0-0-1.24.0-150600.4.6.1

libgstva-1_0-0-1.24.0-150600.4.6.1

libgstvulkan-1_0-0-1.24.0-150600.4.6.1

libgstwayland-1_0-0-1.24.0-150600.4.6.1

libgstwebrtc-1_0-0-1.24.0-150600.4.6.1

libgstwebrtcnice-1_0-0-1.24.0-150600.4.6.1

typelib-1_0-CudaGst-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstAnalytics-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstBadAudio-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCodecs-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCuda-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstDxva-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstInsertBin-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMpegts-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMse-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlay-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlayer-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstVa-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstWebRTC-1_0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

gstreamer-plugins-bad-1.24.0-150600.4.6.1

gstreamer-plugins-bad-devel-1.24.0-150600.4.6.1

gstreamer-plugins-bad-lang-1.24.0-150600.4.6.1

libgstadaptivedemux-1_0-0-1.24.0-150600.4.6.1

libgstanalytics-1_0-0-1.24.0-150600.4.6.1

libgstbadaudio-1_0-0-1.24.0-150600.4.6.1

libgstbasecamerabinsrc-1_0-0-1.24.0-150600.4.6.1

libgstcodecparsers-1_0-0-1.24.0-150600.4.6.1

libgstcodecs-1_0-0-1.24.0-150600.4.6.1

libgstcuda-1_0-0-1.24.0-150600.4.6.1

libgstdxva-1_0-0-1.24.0-150600.4.6.1

libgstinsertbin-1_0-0-1.24.0-150600.4.6.1

libgstisoff-1_0-0-1.24.0-150600.4.6.1

libgstmpegts-1_0-0-1.24.0-150600.4.6.1

libgstmse-1_0-0-1.24.0-150600.4.6.1

libgstphotography-1_0-0-1.24.0-150600.4.6.1

libgstplay-1_0-0-1.24.0-150600.4.6.1

libgstplayer-1_0-0-1.24.0-150600.4.6.1

libgstsctp-1_0-0-1.24.0-150600.4.6.1

libgsttranscoder-1_0-0-1.24.0-150600.4.6.1

libgsturidownloader-1_0-0-1.24.0-150600.4.6.1

libgstva-1_0-0-1.24.0-150600.4.6.1

libgstvulkan-1_0-0-1.24.0-150600.4.6.1

libgstwayland-1_0-0-1.24.0-150600.4.6.1

libgstwebrtc-1_0-0-1.24.0-150600.4.6.1

libgstwebrtcnice-1_0-0-1.24.0-150600.4.6.1

typelib-1_0-CudaGst-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstAnalytics-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstBadAudio-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCodecs-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstCuda-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstDxva-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstInsertBin-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMpegts-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstMse-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlay-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstPlayer-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstVa-1_0-1.24.0-150600.4.6.1

typelib-1_0-GstWebRTC-1_0-1.24.0-150600.4.6.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262744-1/
Link for SUSE-SU-2026:2744-1
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027269.html
E-Mail link for SUSE-SU-2026:2744-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1268401
SUSE Bug 1268401
https://www.suse.com/security/cve/CVE-2026-52719/
SUSE CVE CVE-2026-52719 page

Описание

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential information disclosure.

Затронутые продукты

SUSE Linux Enterprise Module for Basesystem 15 SP7:libgstphotography-1_0-0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libgstplay-1_0-0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libgstplayer-1_0-0-1.24.0-150600.4.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libgsttranscoder-1_0-0-1.24.0-150600.4.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-52719.html
CVE-2026-52719
https://bugzilla.suse.com/1268401
SUSE Bug 1268401

SUSE-SU-2026:2744-1

Описание

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-52719

Описание

Затронутые продукты

Ссылки