Advisories » MGASA-2018-0014

Updated gstreamer0.10-plugins-ugly/gstreamer1.0-plugins-ugly packages fix security vulnerability

Publication date: 01 Jan 2018
Modification date: 01 Jan 2018
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-5846 , CVE-2017-5847

Description

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media
framework and its codecs and demuxers, which may result in denial of
service or the execution of arbitrary code if a malformed media file is
opened (CVE-2017-5846, CVE-2017-5847).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20239
• https://lwn.net/Alerts/714998/
• https://www.debian.org/security/2017/dsa-3821
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5846
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847

SRPMS

5/core

• gstreamer0.10-plugins-ugly-0.10.19-14.2.mga5
• gstreamer1.0-plugins-ugly-1.4.3-2.1.mga5

5/tainted

• gstreamer0.10-plugins-ugly-0.10.19-14.2.mga5.tainted
• gstreamer1.0-plugins-ugly-1.4.3-2.1.mga5.tainted