ELSA-2017-0021

ELSA-2017-0021 - gstreamer1-plugins-bad-free security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-01-05

Description

[1.4.5-6]
- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400897

[1.4.5-5]
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400897

Related CVEs

CVE-2016-9813

CVE-2016-9445

CVE-2016-9812

CVE-2016-9809

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.src.rpm	6d296a5cb9c63befbeda0499894ca13dade6d2c82f64c4cf6e10de3fc783f5c7	ELSA-2024-0013	ol7_x86_64_latest_archive
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.src.rpm	6d296a5cb9c63befbeda0499894ca13dade6d2c82f64c4cf6e10de3fc783f5c7	ELSA-2024-0013	ol7_x86_64_optional_archive
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.src.rpm	6d296a5cb9c63befbeda0499894ca13dade6d2c82f64c4cf6e10de3fc783f5c7	ELSA-2024-0013	ol7_x86_64_u3_patch
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.i686.rpm	738a5bca160f3eb1e79231d708b5186125e47fb1eb812e640a91f3920d95344c	ELSA-2024-0013	ol7_x86_64_latest_archive
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.i686.rpm	738a5bca160f3eb1e79231d708b5186125e47fb1eb812e640a91f3920d95344c	ELSA-2024-0013	ol7_x86_64_u3_patch
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.x86_64.rpm	2cb644d88e1b2dadc2f0d9448691818ba6a081c8aa501327480b229bed6259c0	ELSA-2024-0013	ol7_x86_64_latest_archive
	gstreamer1-plugins-bad-free-1.4.5-6.el7_3.x86_64.rpm	2cb644d88e1b2dadc2f0d9448691818ba6a081c8aa501327480b229bed6259c0	ELSA-2024-0013	ol7_x86_64_u3_patch
	gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3.i686.rpm	311de238d28e8d6939029e8f2f5ae55ec9b86fad44165f0af14fa83b8aadabe2	ELSA-2024-0013	ol7_x86_64_optional_archive
	gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3.x86_64.rpm	044e2444cc23e9559f9920773b79cc04b5eb0c0fa210cbf26f597f63760a2845	ELSA-2024-0013	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team