gstreamer-plugins-good-0.10.23-4.AXS4

エラータID: AXSA:2016-1215:01

Release date: 
Friday, December 23, 2016 - 14:53
Subject: 
gstreamer-plugins-good-0.10.23-4.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

GStreamer is a streaming media framework, based on graphs of filters which
operate on media data. Applications using this library can do anything
from real-time sound processing to playing videos, and just about anything
else media-related. Its plugin-based architecture means that new data
types or processing capabilities can be added simply by installing new
plug-ins.

GStreamer Good Plug-ins is a collection of well-supported plug-ins of
good quality and under the LGPL license.

Security issues fixed with this release:

CVE-2016-9634
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-9635
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-9636
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-9807
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-9808
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-9634
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.
CVE-2016-9635
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
CVE-2016-9636
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.
CVE-2016-9807
The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.
CVE-2016-9808
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
Additional Info: 

N/A

Download: 

SRPMS
  1. gstreamer-plugins-good-0.10.23-4.AXS4.src.rpm
    MD5: f69a6f7154674c5cf93af62960155c98
    SHA-256: b50999a9c94cd56ca71530c1b4bffe3399a5d151ce4357898a075ee020f25cb9
    Size: 2.77 MB

Asianux Server 4 for x86
  1. gstreamer-plugins-good-0.10.23-4.AXS4.i686.rpm
    MD5: e15939c299ed5c0c5369971c08cc1017
    SHA-256: 83a0e58a091fad7bda6d9540a27c7df3f18639e1e0fed46ddaf062e4962b3e43
    Size: 1.25 MB

Asianux Server 4 for x86_64
  1. gstreamer-plugins-good-0.10.23-4.AXS4.x86_64.rpm
    MD5: 61846002911e24620b7f4d66f21f1a13
    SHA-256: 95b9ff887f85882b547a105a1965d980eacbf0c3da30574e19312d5002607d34
    Size: 1.25 MB
  2. gstreamer-plugins-good-0.10.23-4.AXS4.i686.rpm
    MD5: e15939c299ed5c0c5369971c08cc1017
    SHA-256: 83a0e58a091fad7bda6d9540a27c7df3f18639e1e0fed46ddaf062e4962b3e43
    Size: 1.25 MB