Описание
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issues:
- A crafted AVI file could have caused a floating point exception leading to DoS (bsc#1024076, CVE-2017-5837, bsc#1024079, CVE-2017-5844)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
gstreamer-0_10-plugin-gnomevfs-0.10.36-17.1
gstreamer-0_10-plugins-base-0.10.36-17.1
gstreamer-0_10-plugins-base-32bit-0.10.36-17.1
gstreamer-0_10-plugins-base-devel-0.10.36-17.1
gstreamer-0_10-plugins-base-doc-0.10.36-17.1
gstreamer-0_10-plugins-base-lang-0.10.36-17.1
libgstapp-0_10-0-0.10.36-17.1
libgstapp-0_10-0-32bit-0.10.36-17.1
libgstinterfaces-0_10-0-0.10.36-17.1
libgstinterfaces-0_10-0-32bit-0.10.36-17.1
typelib-1_0-GstApp-0_10-0.10.36-17.1
typelib-1_0-GstInterfaces-0_10-0.10.36-17.1
Ссылки
- E-Mail link for openSUSE-SU-2017:1079-1
- SUSE Security Ratings
Описание
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
Затронутые продукты
openSUSE Leap 42.1:gstreamer-0_10-plugin-gnomevfs-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-32bit-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-devel-0.10.36-17.1
Ссылки
- CVE-2017-5837
- SUSE Bug 1023259
- SUSE Bug 1024076
- SUSE Bug 1024079
Описание
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
Затронутые продукты
openSUSE Leap 42.1:gstreamer-0_10-plugin-gnomevfs-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-32bit-0.10.36-17.1
openSUSE Leap 42.1:gstreamer-0_10-plugins-base-devel-0.10.36-17.1
Ссылки
- CVE-2017-5844
- SUSE Bug 1023259
- SUSE Bug 1024079