1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update

    From Salvatore Bonaccorso@1:229/2 to All on Thu Nov 24 21:50:01 2016
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3723-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2016 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : gst-plugins-good1.0
    CVE ID : CVE-2016-9634 CVE-2016-9635 CVE-2016-9636
    Debian Bug : 845375

    Chris Evans discovered that the GStreamer 1.0 plugin used to decode
    files in the FLIC format allowed execution of arbitrary code. Further
    details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing-exploitation.html

    For the stable distribution (jessie), these problems have been fixed in
    version 1.4.4-2+deb8u2.

    For the unstable distribution (sid), these problems have been fixed in
    version 1.10.1-2.

    We recommend that you upgrade your gst-plugins-good1.0 packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlg3Tq5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QYWw/+NwWqq40l6EDunwTnyjTek4DSkya7e07RQnLnu/mfkRz4HpNy5fe1DmOQ IsNqmx0VUVNWIV0YHHKmB3j7eTAJrESMECyrYM7MlMm5q/ZOn/ofY7cFWkg026nF zCmXp18iHSdQOdUQ3FikCE6kUq6eunLJXbn2y2FvEDabFMMjZ7cco2NMGlLB5a7r a3GiA8dQflUQrVxjs9eOKR/wLuA4Bj/6ZdLIqYilcLKvf5DhGgbJrO55JmL4rIvn 68uflKPzJUClPQY/c1JW3CaYnJtzpp3ILsGQM20JJHPry+dqXqDr3JxKmAiEQ9Wn eB1LcNMDP8Hw2vgZYjO3HcgK/liqmM+brQuRBN1Cefqj5X+HXm09ZmMPv3rbov8V P5FpO6cEkG7BG3vQrbMZ25dvf6r0YVFyInf+RhZB/xWImULBH8n6z5qB0wE8eqpF Ac9ZvVLgabQi3RQKQaTO5UM0X85o7BQz4yKvKZfjmbHaAkCHyIaVqzn9PQpF4yfJ ATTW8MPQMfMcX4gGrMf6oZ4clQQDD73T9ly8QKWh41iPTGk6PB22jyKuzprnMtZ6 Cno4qbUCGbpRC3s/NyUhhf8mK1/xLUJSQ4djH2Mvl8ptdXRySFDqaocg3lMrSO7h it1tivX6fu54Js4MDPdtlnzKusr84siiYfO1ivc6T/8m/VjBTLE=
    =Sds7
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)