Уведомление безопасности SUSE-SU-2017:0962-1

Средняя (5.0)

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

SUSE

gstreamer-plugins-bad (any) gstreamer-plugins-bad-debuginfo (any) gstreamer-plugins-bad-debugsource (any) gstreamer-plugins-bad-devel (any) gstreamer-plugins-bad-lang (any) libgstadaptivedemux-1_0-0 (any) libgstadaptivedemux-1_0-0-debuginfo (any) libgstbadaudio-1_0-0 (any) libgstbadaudio-1_0-0-debuginfo (any) libgstbadbase-1_0-0 (any) libgstbadbase-1_0-0-debuginfo (any) libgstbadvideo-1_0-0 (any) libgstbadvideo-1_0-0-debuginfo (any) libgstbasecamerabinsrc-1_0-0 (any) libgstbasecamerabinsrc-1_0-0-debuginfo (any) libgstcodecparsers-1_0-0 (any) libgstcodecparsers-1_0-0-debuginfo (any) libgstgl-1_0-0 (any) libgstgl-1_0-0-debuginfo (any) libgstinsertbin-1_0-0 (any) libgstinsertbin-1_0-0-debuginfo (any) libgstmpegts-1_0-0 (any) libgstmpegts-1_0-0-debuginfo (any) libgstphotography-1_0-0 (any) libgstphotography-1_0-0-debuginfo (any) libgsturidownloader-1_0-0 (any) libgsturidownloader-1_0-0-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE Linux Enterprise Desktop 12-SP2, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, x86_64:
libgstmpegts-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad - 1.8.3-17.2
libgstcodecparsers-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0 - 1.8.3-17.2
libgstcodecparsers-1_0-0-debuginfo - 1.8.3-17.2
libgstadaptivedemux-1_0-0 - 1.8.3-17.2
libgstadaptivedemux-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debugsource - 1.8.3-17.2
libgstphotography-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0-debuginfo - 1.8.3-17.2
libgstbadaudio-1_0-0 - 1.8.3-17.2
libgstbadaudio-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debuginfo - 1.8.3-17.2
libgstbadvideo-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0-debuginfo - 1.8.3-17.2
libgstphotography-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0-debuginfo - 1.8.3-17.2
libgstmpegts-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0 - 1.8.3-17.2
libgstbadvideo-1_0-0-debuginfo - 1.8.3-17.2
SUSE Linux Enterprise Server 12-SP2:
noarch:
gstreamer-plugins-bad-lang - 1.8.3-17.2
SUSE Linux Enterprise Software Development Kit 12-SP2:
aarch64, ppc64le, s390x, x86_64:
gstreamer-plugins-bad-devel - 1.8.3-17.2
gstreamer-plugins-bad-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debugsource - 1.8.3-17.2
libgsturidownloader-1_0-0-debuginfo - 1.8.3-17.2
libgstinsertbin-1_0-0-debuginfo - 1.8.3-17.2
libgstinsertbin-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0 - 1.8.3-17.2
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
libgstmpegts-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad - 1.8.3-17.2
libgstcodecparsers-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0 - 1.8.3-17.2
libgstcodecparsers-1_0-0-debuginfo - 1.8.3-17.2
libgstadaptivedemux-1_0-0 - 1.8.3-17.2
libgstadaptivedemux-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debugsource - 1.8.3-17.2
libgstphotography-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0-debuginfo - 1.8.3-17.2
libgstbadaudio-1_0-0 - 1.8.3-17.2
libgstbadaudio-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debuginfo - 1.8.3-17.2
libgstbadvideo-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0-debuginfo - 1.8.3-17.2
libgstphotography-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0-debuginfo - 1.8.3-17.2
libgstmpegts-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0 - 1.8.3-17.2
libgstbadvideo-1_0-0-debuginfo - 1.8.3-17.2
SUSE Linux Enterprise Desktop 12-SP2:
noarch:
gstreamer-plugins-bad-lang - 1.8.3-17.2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
libgstmpegts-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad - 1.8.3-17.2
libgstcodecparsers-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0 - 1.8.3-17.2
libgstcodecparsers-1_0-0-debuginfo - 1.8.3-17.2
libgstadaptivedemux-1_0-0 - 1.8.3-17.2
libgstadaptivedemux-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debugsource - 1.8.3-17.2
libgstphotography-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0-debuginfo - 1.8.3-17.2
libgstbadaudio-1_0-0 - 1.8.3-17.2
libgstbadaudio-1_0-0-debuginfo - 1.8.3-17.2
gstreamer-plugins-bad-debuginfo - 1.8.3-17.2
libgstbadvideo-1_0-0 - 1.8.3-17.2
libgsturidownloader-1_0-0-debuginfo - 1.8.3-17.2
libgstphotography-1_0-0-debuginfo - 1.8.3-17.2
libgstbasecamerabinsrc-1_0-0 - 1.8.3-17.2
libgstbadbase-1_0-0-debuginfo - 1.8.3-17.2
libgstmpegts-1_0-0 - 1.8.3-17.2
libgstgl-1_0-0 - 1.8.3-17.2
libgstbadvideo-1_0-0-debuginfo - 1.8.3-17.2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
noarch:
gstreamer-plugins-bad-lang - 1.8.3-17.2

http://lists.suse.com/pipermail/sle-security-updates/2017-April/002790.html
https://bugzilla.suse.com/1024044
https://bugzilla.suse.com/1024068

Источник: CVE
Наименование: CVE-2017-5843
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5843

Источник: CVE
Наименование: CVE-2017-5848
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848