File _patchinfo of Package patchinfo.3867

<patchinfo incident="3867">
  <issue id="1013655" tracker="bnc">VUL-0: CVE-2016-9807: gstreamer-plugins-good: flic decoder invalid read</issue>
  <issue id="1012102" tracker="bnc">VUL-0: CVE-2016-9634: gstreamer-plugins-good: out-of-bounds write 1</issue>
  <issue id="1012103" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 2</issue>
  <issue id="1013653" tracker="bnc">VUL-0: CVE-2016-9808: gstreamer-plugins-good: still a bug in flic decoder</issue>
  <issue id="1012104" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 3</issue>
  <issue id="1013663" tracker="bnc">VUL-0: CVE-2016-9810: gstreamer-plugins-good: flxdec: Unreferences itself one time too many on invalid files</issue>
  <issue id="2016-9635" tracker="cve" />
  <issue id="2016-9634" tracker="cve" />
  <issue id="2016-9636" tracker="cve" />
  <issue id="2016-9810" tracker="cve" />
  <issue id="2016-9807" tracker="cve" />
  <issue id="2016-9808" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>mgorse</packager>
  <description>
This update for gstreamer-plugins-good fixes the following issues:

* CVE-2016-9807: flic decoder invalid read could lead to crash [bsc#1013655]
* CVE-2016-9634: flic out-of-bounds write could lead to code execution  [bsc#1012102]
* CVE-2016-9635: flic out-of-bounds write could lead to code execution [bsc#1012103]
* CVE-2016-9635: flic out-of-bounds write could lead to code execution [bsc#1012104]
* CVE-2016-9808: A maliciously crafted flic file can still cause invalid memory accesses. [bsc#1013653]
* CVE-2016-9810: A maliciously crafted flic file can still cause invalid memory accesses [bsc#1013663]

</description>
  <summary>Security update for gstreamer-plugins-good</summary>
</patchinfo>
openSUSE Build Service is sponsored by