File _patchinfo of Package patchinfo.6137

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.6137

<patchinfo incident="6137">
  <issue id="1013655" tracker="bnc">VUL-0: CVE-2016-9807: gstreamer-plugins-good: flic decoder invalid read</issue>
  <issue id="1012102" tracker="bnc">VUL-0: CVE-2016-9634: gstreamer-plugins-good: out-of-bounds write 1</issue>
  <issue id="1012103" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 2</issue>
  <issue id="1013653" tracker="bnc">VUL-0: CVE-2016-9808: gstreamer-plugins-good: still a bug in flic decoder</issue>
  <issue id="1012104" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 3</issue>
  <issue id="1013663" tracker="bnc">VUL-0: CVE-2016-9810: gstreamer-plugins-good: flxdec: Unreferences itself one time too many on invalid files</issue>
  <issue id="2016-9635" tracker="cve" />
  <issue id="2016-9634" tracker="cve" />
  <issue id="2016-9636" tracker="cve" />
  <issue id="2016-9810" tracker="cve" />
  <issue id="2016-9807" tracker="cve" />
  <issue id="2016-9808" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>yfjiang</packager>
  <description>This update for gstreamer-plugins-good fixes the following security issues:

- CVE-2016-9807: Flic decoder invalid read could lead to crash. (bsc#1013655)
- CVE-2016-9634: Flic out-of-bounds write could lead to code execution. (bsc#1012102)
- CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012103)
- CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012104)
- CVE-2016-9808: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013653)
- CVE-2016-9810: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013663)

This update was imported from the SUSE:SLE-12-SP2:Update update project.</description>
  <summary>Security update for gstreamer-plugins-good</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.6137

Places