SUSE-SU-2023:3801-1: Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: CVE-2023-37327: Fixed FLAC file parsing integer overflow (bsc#1213128). CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow (bsc#1213131). CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstFft-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstsdpto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstAllocators-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstApp-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstRtp-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstPbutils-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstSdp-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstRtsp-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgsttagto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstvideoto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/gstreamer-plugins-base-debuginfoto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstappto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstrtspto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/gstreamer-plugins-base-develto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstpbutilsto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstallocatorsto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstVideo-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstTag-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/gstreamer-plugins-base-debugsourceto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstAudio-1_0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstrtpto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstallocatorsto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstaudioto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstaudioto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstfftto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstrtpto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstriffto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstpbutilsto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstrtspto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/gstreamer-plugins-baseto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgsttagto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstappto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstfftto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstvideoto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstriffto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/libgstsdpto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.6.1 - Upgrade
Upgrade
suse/gstreamer-plugins-base-langto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.6.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3801=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3801=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3801=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3801=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.