SUSE-SU-2023:4980-1

Details

Description of the patch:

This update for gstreamer fixes the following issues:

CVE-2023-40474: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215796).

Affected Packages

gstreamer

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

gstreamer-devel

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

gstreamer-lang

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

gstreamer-utils

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

libgstreamer-1_0-0

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

typelib-1_0-Gst-1_0

SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1SUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

1.12.5-150000.3.17.1

References

ADVISORY

https://bugzilla.suse.com/1215796

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2023-December/017564.html

ADVISORY

https://www.suse.com/security/cve/CVE-2023-40474/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20234980-1/