Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

openSUSE 15.5: 2023:3247-1 Major: gstreamer-plugins-ugly overflow issue

opensuse
Calendar Grey August 8, 2023
Scroller Opensuse
A significant patch for gstreamer-plugins-bad resolving critical memory leak vulnerabilities. More information below.
This update for gstreamer-plugins-ugly fixes the following issues: CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR audio buffers

Description

This update for gstreamer-plugins-ugly fixes the following issues:

* CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR

audio buffers. (bsc#1213751)

* CVE-2023-38104: Fixed an integer overflow when calculation audio packet size

. (bsc#1213750)

Topics%20covered

Topics Covered

security advisory security update security issue critical important integer overflow openSUSE gstreamer SUSE Linux Enterprise audio buffer gstreamer-plugins-ugly

Patch

## Patch Instructions:

To install this SUSE Important update use the SUSE recommended installation

methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.5

zypper in -t patch SUSE-2023-3247=1 openSUSE-SLE-15.5-2023-3247=1

* SUSE Linux Enterprise Workstation Extension 15 SP5

zypper in -t patch SUSE-SLE-Product-WE-15-SP5-2023-3247=1

Package List

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

* gstreamer-plugins-ugly-debugsource-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-debuginfo-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-1.22.0-150500.3.3.1

* openSUSE Leap 15.5 (x86_64)

* gstreamer-plugins-ugly-32bit-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-32bit-debuginfo-1.22.0-150500.3.3.1

* openSUSE Leap 15.5 (noarch)

* gstreamer-plugins-ugly-lang-1.22.0-150500.3.3.1

* openSUSE Leap 15.5 (aarch64_ilp32)

* gstreamer-plugins-ugly-64bit-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-64bit-debuginfo-1.22.0-150500.3.3.1

* SUSE Linux Enterprise Workstation Extension 15 SP5 (x86_64)

* gstreamer-plugins-ugly-debugsource-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-debuginfo-1.22.0-150500.3.3.1

* gstreamer-plugins-ugly-1.22.0-150500.3.3.1

* SUSE Linux Enterprise Workstation Extension 15 SP5 (noarch)

* gstreamer-plugins-ugly-lang-1.22.0-150500.3.3.1

References

* #1213750

* #1213751

## References:

* https://www.suse.com/security/cve/CVE-2023-38103.html

* https://www.suse.com/security/cve/CVE-2023-38104.html

* https://bugzilla.suse.com/show_bug.cgi?id=1213750

* https://bugzilla.suse.com/show_bug.cgi?id=1213751

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:3247-1
Rating: important

Topics%20covered

Topics Covered

security advisory security update security issue critical important integer overflow openSUSE gstreamer SUSE Linux Enterprise audio buffer gstreamer-plugins-ugly

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.