SUSE-SU-2023:4944-1: Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libgstbadbaseto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstInsertBin-1_0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadbaseto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstMpegts-1_0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstGL-1_0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstPlayer-1_0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-debuginfoto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstglto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstglto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-develto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-debugsourceto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadallocatorsto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadallocatorsto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstBadAllocators-1_0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadvideoto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstbadvideoto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-1.12.5-150000.3.18.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-langto a version that resolves this vulnerability.Fixed in 1.12.5-150000.3.18.1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4944=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server 15 SP1 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4944=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server for SAP Applications 15 SP1to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4944=1
Event History
Frequently Asked Questions
Which SUSE package components are included in this security update?
The update covers typelib, libgstbadbase, libgstbadaudio, libgstcodecparsers, libgstadaptivedemux, libgstwayland, libgsturidownloader, and libgstbasecamerabinsrc.