Security update for gstreamer-plugins-base SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2019:1639-1 Final 1 1 2019-06-27T05:51:42Z current 2019-06-27T05:51:42Z 2019-06-27T05:51:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gstreamer-plugins-base This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375). This update was imported from the SUSE:SLE-12-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) http://lists.opensuse.org/opensuse-updates/2019-06/msg00171.html E-Mail link for openSUSE-SU-2019:1639-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 gstreamer-plugins-base-1.8.3-8.3.1 gstreamer-plugins-base-32bit-1.8.3-8.3.1 gstreamer-plugins-base-devel-1.8.3-8.3.1 gstreamer-plugins-base-devel-32bit-1.8.3-8.3.1 gstreamer-plugins-base-doc-1.8.3-8.3.1 gstreamer-plugins-base-lang-1.8.3-8.3.1 libgstallocators-1_0-0-1.8.3-8.3.1 libgstallocators-1_0-0-32bit-1.8.3-8.3.1 libgstapp-1_0-0-1.8.3-8.3.1 libgstapp-1_0-0-32bit-1.8.3-8.3.1 libgstaudio-1_0-0-1.8.3-8.3.1 libgstaudio-1_0-0-32bit-1.8.3-8.3.1 libgstfft-1_0-0-1.8.3-8.3.1 libgstfft-1_0-0-32bit-1.8.3-8.3.1 libgstpbutils-1_0-0-1.8.3-8.3.1 libgstpbutils-1_0-0-32bit-1.8.3-8.3.1 libgstriff-1_0-0-1.8.3-8.3.1 libgstriff-1_0-0-32bit-1.8.3-8.3.1 libgstrtp-1_0-0-1.8.3-8.3.1 libgstrtp-1_0-0-32bit-1.8.3-8.3.1 libgstrtsp-1_0-0-1.8.3-8.3.1 libgstrtsp-1_0-0-32bit-1.8.3-8.3.1 libgstsdp-1_0-0-1.8.3-8.3.1 libgstsdp-1_0-0-32bit-1.8.3-8.3.1 libgsttag-1_0-0-1.8.3-8.3.1 libgsttag-1_0-0-32bit-1.8.3-8.3.1 libgstvideo-1_0-0-1.8.3-8.3.1 libgstvideo-1_0-0-32bit-1.8.3-8.3.1 typelib-1_0-GstAllocators-1_0-1.8.3-8.3.1 typelib-1_0-GstApp-1_0-1.8.3-8.3.1 typelib-1_0-GstAudio-1_0-1.8.3-8.3.1 typelib-1_0-GstFft-1_0-1.8.3-8.3.1 typelib-1_0-GstPbutils-1_0-1.8.3-8.3.1 typelib-1_0-GstRtp-1_0-1.8.3-8.3.1 typelib-1_0-GstRtsp-1_0-1.8.3-8.3.1 typelib-1_0-GstSdp-1_0-1.8.3-8.3.1 typelib-1_0-GstTag-1_0-1.8.3-8.3.1 typelib-1_0-GstVideo-1_0-1.8.3-8.3.1 gstreamer-plugins-base-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 gstreamer-plugins-base-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 gstreamer-plugins-base-devel-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 gstreamer-plugins-base-devel-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 gstreamer-plugins-base-doc-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 gstreamer-plugins-base-lang-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstallocators-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstallocators-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstapp-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstapp-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstaudio-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstaudio-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstfft-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstfft-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstpbutils-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstpbutils-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstriff-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstriff-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstrtp-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstrtp-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstrtsp-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstrtsp-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstsdp-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstsdp-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgsttag-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgsttag-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstvideo-1_0-0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 libgstvideo-1_0-0-32bit-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstAllocators-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstApp-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstAudio-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstFft-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstPbutils-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstRtp-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstRtsp-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstSdp-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstTag-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-GstVideo-1_0-1.8.3-8.3.1 as a component of openSUSE Leap 42.3 GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution. CVE-2019-9928 openSUSE Leap 42.3:gstreamer-plugins-base-1.8.3-8.3.1 openSUSE Leap 42.3:gstreamer-plugins-base-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:gstreamer-plugins-base-devel-1.8.3-8.3.1 openSUSE Leap 42.3:gstreamer-plugins-base-devel-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:gstreamer-plugins-base-doc-1.8.3-8.3.1 openSUSE Leap 42.3:gstreamer-plugins-base-lang-1.8.3-8.3.1 openSUSE Leap 42.3:libgstallocators-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstallocators-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstapp-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstapp-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstaudio-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstaudio-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstfft-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstfft-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstpbutils-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstpbutils-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstriff-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstriff-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstrtp-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstrtp-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstrtsp-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstrtsp-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstsdp-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstsdp-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgsttag-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgsttag-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:libgstvideo-1_0-0-1.8.3-8.3.1 openSUSE Leap 42.3:libgstvideo-1_0-0-32bit-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstAllocators-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstApp-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstAudio-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstFft-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstPbutils-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstRtp-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstRtsp-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstSdp-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstTag-1_0-1.8.3-8.3.1 openSUSE Leap 42.3:typelib-1_0-GstVideo-1_0-1.8.3-8.3.1 important Please Install the update. http://lists.opensuse.org/opensuse-updates/2019-06/msg00171.html https://www.suse.com/security/cve/CVE-2019-9928.html CVE-2019-9928 https://bugzilla.suse.com/1133375 SUSE Bug 1133375