SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4943

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4943

Security update for gstreamer-plugins-bad

Type: security

Severity: important

Issued: 2023-12-21

Description:

This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).

References

CVE: CVE-2023-44446
CVE: CVE-2023-40475
Bugzilla: 1217213 VUL-0: CVE-2023-44446: gstreamer-plugins-bad: GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
Bugzilla: 1215792 VUL-0: CVE-2023-40475: gstreamer-plugins-bad: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

Packages

gstreamer-plugins-bad-1.22.0-150500.3.17.1