Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Fedora 25: 2016-4c8140241f Moderate: GStreamer Typefind Bounds Check

fedora
Calendar Grey December 9, 2016
Scroller Fedora Esm H88
A new update for the gstreamer-plugins-base package in Fedora 25 addresses security flaws linked to improper bounds checking for Windows platform detection, enhancing system security.
typefind: bounds check windows ico detection

Summary

GStreamer is a streaming media framework, based on graphs of filters which

operate on media data. Applications using this library can do anything

from real-time sound processing to playing videos, and just about anything

else media-related. Its plugin-based architecture means that new data

types or processing capabilities can be added simply by installing new

plug-ins.

This package contains a set of well-maintained base plug-ins.

Update Information:

typefind: bounds check windows ico detection

Topics%20covered

Topics Covered

security advisory moderate Fedora security fix media framework gstreamer bounds check

Change Log

References


[ 1 ] Bug #1401949 - CVE-2016-9811 gstreamer-plugins-base: gstreamer: Out of bounds heap read in windows_icon_typefind [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1401949

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade gstreamer-plugins-base' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: gstreamer-plugins-base
Product: Fedora 25
Version: 0.10.36
Release: 15.fc25
URL: https://gstreamer.freedesktop.org/
Summary: GStreamer streaming media framework base plug-ins

Topics%20covered

Topics Covered

security advisory moderate Fedora security fix media framework gstreamer bounds check

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.