FreeBSD : gstreamer1-plugins-bad -- Out-of-bounds reads in MIDI parser (500cc49c-e93b-11f0-b8d8-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 500cc49c-e93b-11f0-b8d8-4ccc6adda413 advisory. The GStreamer Security Center reports: Multiple out-of-bounds reads in the MIDI parser that ca...

CLSA-2025-1764688338 gstreamer1-plugins-good: Fix of CVE-2024-47537

CVE-2024-47537: qtdemux: fix integer overflow when allocating the samples table for fragmented MP4...

CLSA-2025-1764325377 gstreamer1-plugins-base: Fix of CVE-2024-47615

CVE-2024-47615: fix OOB-Write in gstparsevorbissetuppacket by validating integer size input to prevent memory corruption...

TencentOS Server 2: libreoffice (TSSA-2024:0245)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0245 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CLSA-2025-1763139214 gstreamer1-plugins-base: Fix of CVE-2024-47615

CVE-2024-47615: fix OOB-Write in gstparsevorbissetuppacket by validating integer size input to prevent memory corruption...

CLSA-2025-1762544767 gstreamer1-plugins-base: Fix of CVE-2024-47538

CVE-2024-47538: fix stack-buffer overflow in vorbishandleidentificationpacket function by limiting writing beyond boundaries of position array...

Mageia: Security Advisory (MGASA-2025-0264)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:03629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gstreamer-plugins-rs (SUSE-SU-2025:03629-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03629-1 advisory. Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in...

Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: Update to version 0.12.11 jscPED-13826: CVE-2024-32650: Fixed infinite loop in rustls::conn::ConnectionCommon:completeio with proper client input bsc1223219. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:03629-1 Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in rustls::conn::ConnectionCommon:completeio with proper client input bsc1223219...

SLED15 / SLES15 Security Update : gstreamer-plugins-rs (SUSE-SU-2025:03459-1)

The remote openSUSE host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03459-1 advisory. - Update crate shlex to 1.3.0: RUSTSEC-2024-0006: Fixed multiple issues involving quote API bsc1230028 Tenable has extracted the preceding description block...

Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: Update crate shlex to 1.3.0: RUSTSEC-2024-0006: Fixed multiple issues involving quote API bsc1230028 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:03459-1 Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: - Update crate shlex to 1.3.0: RUSTSEC-2024-0006: Fixed multiple issues involving quote API bsc1230028...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2025-984701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984701 advisory. Unity Link Advisory UTSA-2025-984701 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2025-987413)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987413 advisory. In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetree function may read past the end of a heap buffer while parsing an MP4 file, leading to information...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2025-984686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984686 advisory. Unity Link Advisory UTSA-2025-984686 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2025-984699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984699 advisory. Unity Link Advisory UTSA-2025-984699 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2025-984674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984674 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gstssaparseremoveoverridecodes...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-base (UTSA-2025-984688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984688 advisory. Unity Link Advisory UTSA-2025-984688 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...