• [SECURITY] [DSA 4437-1] gst-plugins-base1.0 security update

    From Moritz Muehlenhoff@1:229/2 to All on Mon Apr 29 22:50:01 2019
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4437-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    April 29, 2019 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : gst-plugins-base1.0
    CVE ID : CVE-2019-9928

    It was discovered that a buffer overflow in the RTSP parser of the
    GStreamer media framework may result in the execution of arbitrary code
    if a malformed RSTP stream is opened.

    For the stable distribution (stretch), this problem has been fixed in
    version 1.10.4-1+deb9u1.

    We recommend that you upgrade your gst-plugins-base1.0 packages.

    For the detailed security status of gst-plugins-base1.0 please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/gst-plugins-base1.0

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlzHYwUACgkQEMKTtsN8 TjbH2hAAiSBUDHF9gzqlDsbKXMeO4NPJy/udFrqFoXqGvjd+Z+hi8hmRUOP3YAr5 gHjsjp4PCwAZCgcu9mFFuP44brgkKJmZfL+J8nccusbUb+QzbapZYx8ZFr1rshmN LiBaTc4+enyXBZsonywqueXX1v1qXNTPuTnBlq4/348RIv1+8p0PUMLGw5tk8k0Z Q822Tj0mrVvwgkt8hj2Z/LdU2Vjx6LALRHZdgbQL4Qu0yEhQakM1HqDOYLTVUmP1 80sXF86uZe2M+H/1A/MkwbGQK2y4EJr8IgbO1e1Oyym0oGp+pT/Aleli6a+IqqHw bOApdjMtrXgtaaxCjRSfAL5mk1oy6WcpviJ/PYoRkCrNqMXaPidK8PcsoEEeDTWE aVSpco/lWj7KLveJqKDzVAK0gn5Gm3LfyuqpmrFnJMBfvvKhGnB3bHXe/fc9tNZK H7+rAs5GnVJaJR6vTUV4e1rxeBAKsSEVuPZF7U1wD3CEC6tTnlM4LVPiiugykoP1 01fA+2OtpkFzdatwzy7nKCbAWX0wr9nFxX+EfXyWmaedJR9vYHUH0wicwwRuHMTn 1y9//Son4stf5wlW36qwtGkZn+fhQGsYU66FbVc5cfCxC7vwbbKiBiaNp4c4aiCy ReqQs0XRgiFl3x6d047agSuw1+vWucXKVEZdrNRPZ00vfJyrZAc=
    =AKVc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)