SUSE-SU-2023:4971-1: Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213). CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstWebRTC-1_0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstMpegts-1_0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-debugsourceto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstPlayer-1_0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprintto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-develto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-docto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-GstInsertBin-1_0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprint-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprintto a version that resolves this vulnerability.Fixed in 32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprintto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-32bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-langto a version that resolves this vulnerability.Fixed in 1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprintto a version that resolves this vulnerability.Fixed in 64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-bad-chromaprintto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstisoffto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwebrtcto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstsctpto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstinsertbinto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbasecamerabinsrcto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstplayerto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstmpegtsto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstcodecparsersto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstphotographyto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstwaylandto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgsturidownloaderto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/gstreamer-plugins-badto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstadaptivedemuxto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-debuginfo-1.16.3-150300.9.15.1 - Upgrade
Upgrade
suse/libgstbadaudioto a version that resolves this vulnerability.Fixed in 1_0-0-64bit-1.16.3-150300.9.15.1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-2023-4971=1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4971=1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4971=1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4971=1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4971=1 - Upgrade
Upgrade
gstreamer-plugins-badto a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-4971=1