File _patchinfo of Package patchinfo.6536

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.6536

<patchinfo incident="6536">
  <issue id="1013655" tracker="bnc">VUL-0: CVE-2016-9807: gstreamer-plugins-good: flic decoder invalid read</issue>
  <issue id="1012102" tracker="bnc">VUL-0: CVE-2016-9634: gstreamer-plugins-good: out-of-bounds write 1</issue>
  <issue id="1012103" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 2</issue>
  <issue id="1013653" tracker="bnc">VUL-0: CVE-2016-9808: gstreamer-plugins-good: still a bug in flic decoder</issue>
  <issue id="1012104" tracker="bnc">VUL-0: CVE-2016-9635: gstreamer-plugins-good: out-of-bounds write 3</issue>
  <issue id="1013663" tracker="bnc">VUL-0: CVE-2016-9810: gstreamer-plugins-good: flxdec: Unreferences itself one time too many on invalid files</issue>
  <issue id="2016-9635" tracker="cve" />
  <issue id="2016-9634" tracker="cve" />
  <issue id="2016-9636" tracker="cve" />
  <issue id="2016-9810" tracker="cve" />
  <issue id="2016-9807" tracker="cve" />
  <issue id="2016-9808" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>mgorse</packager>
  <description>
This update for gstreamer-0_10-plugins-good fixes the following issues:

Security issues fixed:
- CVE-2016-9634, CVE-2016-9635: add some bounds checking (boo#1012102 boo#1012103).
- CVE-2016-9636: fix casting for some comparisons (boo#1012104).
- CVE-2016-9807, CVE-2016-9808: rewrite logic using GsgtByteReader/Writer (boo#1013653 boo#1013655).
- CVE-2016-9810: don't unref() parent in the chain function (boo#1013663).
</description>
  <summary>Security update for gstreamer-0_10-plugins-good</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.6536

Places