Security update for gstreamer-plugins-bad SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:1012-1 Final 1 1 2021-07-09T11:04:33Z current 2021-07-09T11:04:33Z 2021-07-09T11:04:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gstreamer-plugins-bad This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking() (bsc#1181255) - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time - audiobuffersplit: Specify in the template caps that only interleaved audio is supported - audiobuffersplit: Unset DISCONT flag if not discontinuous - autoconvert: Fix lock-less exchange or free condition - autoconvert: fix compiler warnings with g_atomic on recent GLib versions - avfvideosrc: element requests camera permissions even with capture-screen property is true - codecparsers: h264parser: guard against ref_pic_markings overflow - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated - dtls/connection: fix EOF handling with openssl 1.1.1e - fdkaacdec: add support for mpegversion=2 - hls: Check nettle version to ensure AES128 support - ipcpipeline: Rework compiler checks - interlace: Increment phase_index before checking if we're at the end of the phase - h264parser: Do not allocate too large size of memory for registered user data SEI - ladspa: fix unbounded integer properties - modplug: avoid division by zero - msdkdec: Fix GstMsdkContext leak - msdkenc: fix leaks on windows - musepackdec: Don't fail all queries if no sample rate is known yet - openslessink: Allow openslessink to handle 48kHz streams. - opencv: allow compilation against 4.2.x - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc - vulkan: Drop use of VK_RESULT_BEGIN_RANGE - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset - wasapi: Fix possible deadlock while downwards state change - waylandsink: Clear window when pipeline is stopped - webrtc: Support non-trickle ICE candidates in the SDP - webrtc: Unmap all non-binary buffers received via the datachannel The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2021-1012 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2B2UD46YGBOYO64SOPMOM6DQAL6FGCHZ/ E-Mail link for openSUSE-SU-2021:1012-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1181255 SUSE Bug 1181255 https://www.suse.com/security/cve/CVE-2021-3185/ SUSE CVE CVE-2021-3185 page openSUSE Leap 15.3 gstreamer-plugins-bad-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-chromaprint-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-devel-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-doc-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-32bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-fluidsynth-64bit-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-lang-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstadaptivedemux-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstbadaudio-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstcodecparsers-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstinsertbin-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstisoff-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstmpegts-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstphotography-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstplayer-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstsctp-1_0-0-64bit-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-32bit-1.16.3-lp153.3.3.1 libgsturidownloader-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstwayland-1_0-0-64bit-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-32bit-1.16.3-lp153.3.3.1 libgstwebrtc-1_0-0-64bit-1.16.3-lp153.3.3.1 typelib-1_0-GstInsertBin-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstMpegts-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstPlayer-1_0-1.16.3-lp153.3.3.1 typelib-1_0-GstWebRTC-1_0-1.16.3-lp153.3.3.1 gstreamer-plugins-bad-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-chromaprint-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-chromaprint-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-chromaprint-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-devel-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-doc-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-fluidsynth-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-fluidsynth-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-fluidsynth-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 gstreamer-plugins-bad-lang-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstadaptivedemux-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstadaptivedemux-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstadaptivedemux-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbadaudio-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbadaudio-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbadaudio-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbasecamerabinsrc-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstcodecparsers-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstcodecparsers-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstcodecparsers-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstinsertbin-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstinsertbin-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstinsertbin-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstisoff-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstisoff-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstisoff-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstmpegts-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstmpegts-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstmpegts-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstphotography-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstphotography-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstphotography-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstplayer-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstplayer-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstplayer-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstsctp-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstsctp-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstsctp-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgsturidownloader-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgsturidownloader-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgsturidownloader-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwayland-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwayland-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwayland-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwebrtc-1_0-0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwebrtc-1_0-0-32bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 libgstwebrtc-1_0-0-64bit-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 typelib-1_0-GstInsertBin-1_0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 typelib-1_0-GstMpegts-1_0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 typelib-1_0-GstPlayer-1_0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 typelib-1_0-GstWebRTC-1_0-1.16.3-lp153.3.3.1 as a component of openSUSE Leap 15.3 A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. CVE-2021-3185 openSUSE Leap 15.3:gstreamer-plugins-bad-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-chromaprint-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-chromaprint-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-chromaprint-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-devel-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-doc-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-fluidsynth-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-fluidsynth-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-fluidsynth-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:gstreamer-plugins-bad-lang-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstadaptivedemux-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstadaptivedemux-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstadaptivedemux-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbadaudio-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbadaudio-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbadaudio-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbasecamerabinsrc-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbasecamerabinsrc-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstbasecamerabinsrc-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstcodecparsers-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstcodecparsers-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstcodecparsers-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstinsertbin-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstinsertbin-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstinsertbin-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstisoff-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstisoff-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstisoff-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstmpegts-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstmpegts-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstmpegts-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstphotography-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstphotography-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstphotography-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstplayer-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstplayer-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstplayer-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstsctp-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstsctp-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstsctp-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgsturidownloader-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgsturidownloader-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgsturidownloader-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwayland-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwayland-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwayland-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwebrtc-1_0-0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwebrtc-1_0-0-32bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:libgstwebrtc-1_0-0-64bit-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:typelib-1_0-GstInsertBin-1_0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:typelib-1_0-GstMpegts-1_0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:typelib-1_0-GstPlayer-1_0-1.16.3-lp153.3.3.1 openSUSE Leap 15.3:typelib-1_0-GstWebRTC-1_0-1.16.3-lp153.3.3.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2B2UD46YGBOYO64SOPMOM6DQAL6FGCHZ/ https://www.suse.com/security/cve/CVE-2021-3185.html CVE-2021-3185 https://bugzilla.suse.com/1181255 SUSE Bug 1181255