Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:1944-1 Important: Buffer Overflow In Gstreamer-Plugins-Bad

suse
Calendar Grey June 10, 2021
Scroller Suse
SUSE Security Patch: gstreamer-plugins-good upgrade addresses severe vulnerabilities in edition 1.16.3 impacting multiple platforms.
An update that fixes one vulnerability is now available

Summary

This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking() (bsc#1181255) - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time - audiobuffersplit: Specify in the template caps that only interleaved audio is supported - audiobuffersplit: Unset DISCONT flag if not discontinuous - autoconvert: Fix lock-less exchange or free condition - autoconvert: fix compiler warnings with g_atomic on recent GLib versions - avfvideosrc: element requests camera permissions even with capture-screen property is true - codecparsers: h264parser: guard against ref_pic_markings overflow

Topics%20covered

Topics Covered

security advisory buffer overflow software update SUSE important update patch instructions gstreamer-plugins-bad

References

#1181255

Cross- CVE-2021-3185

CVSS scores:

CVE-2021-3185 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-3185 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Module for Desktop Applications 15-SP3

SUSE Linux Enterprise Module for Basesystem 15-SP3

https://www.suse.com/security/cve/CVE-2021-3185.html

https://bugzilla.suse.com/1181255

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1944-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow software update SUSE important update patch instructions gstreamer-plugins-bad

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.