SUSE-SU-2023:3247-1 Security update for gstreamer-plugins-ugly

This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR audio buffers. bsc1213751 - CVE-2023-38104: Fixed an integer overflow when calculation audio packet size . bsc1213750...

SUSE-SU-2023:3246-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. bsc1213128...

SUSE-SU-2023:3236-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. bsc1213128 - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code execution vulnerability. bsc1213131...

SUSE-SU-2023:3235-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. bsc1213126...

SUSE-SU-2023:3226-1 Security update for gstreamer-plugins-ugly

This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks bsc1213750. - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks bsc1213751...

SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:3220-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3220-1 advisory. - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow bsc1213126. Tenable has extracted the...

SUSE SLED15: gstreamer-plugins-good / gstreamer-plugins-good-32bit / etc (SUSE-SU-2023:3219-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3219-1 advisory. - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128. Tenable has extracted th...

SUSE SLED15: gstreamer-plugins-base / gstreamer-plugins-base-32bit / etc (SUSE-SU-2023:3221-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3221-1 advisory. - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128. - CVE-2023-3732...

openSUSE 15 Security Update : gstreamer-plugins-ugly (SUSE-SU-2023:3222-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3222-1 advisory. - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks bsc1213751. - CVE-2023-38104: Fixed integer overflow during parsing of MDPR...

SUSE-SU-2023:3222-1 Security update for gstreamer-plugins-ugly

This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks bsc1213751. - CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks bsc1213750...

SUSE-SU-2023:3221-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128. - CVE-2023-37328: Fixed Heap-based Buffer Overflow in GStreamer PGS bsc1213131...

SUSE-SU-2023:3220-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow bsc1213126...

SUSE-SU-2023:3219-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128...

GStreamer gst-plugins-bad 安全漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer gst-plugins-bad version 1.0. An attacker can exploit the vulnerability to execute arbitrary code...

Amazon Linux 2 : gstreamer-plugins-good (ALAS-2023-2122)

The version of gstreamer-plugins-good installed on the remote host is prior to 0.10.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2122 advisory. Integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Tenable has extracted the...

Amazon Linux 2 : gstreamer-plugins-base (ALAS-2023-2121)

The version of gstreamer-plugins-base installed on the remote host is prior to 0.10.36-18. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2121 advisory. Integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Tenable has extracted the...

Important: gstreamer-plugins-good

Issue Overview: Integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Affected Packages: gstreamer-plugins-good Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras...

Important: gstreamer-plugins-base

Issue Overview: Integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Affected Packages: gstreamer-plugins-base Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras...

RHEL 9 : gstreamer1-plugins-good (RHSA-2023:2260)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2260 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contai...

Amazon Linux 2 : gstreamer-plugins-good (ALAS-2023-2011)

The version of gstreamer-plugins-good installed on the remote host is prior to 0.10.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2011 advisory. GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed...