Mageia alert MGASA-2017-0021 (gstreamer)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2017-0021: Updated gstreamer packages fix security vulnerability 
Date:
    	     
 
Fri, 27 Jan 2017 10:19:37 +0100
Message-ID:
    	     
 
<20170127091937.E34039F7DF@duvel.mageia.org>
MGASA-2017-0021 - Updated gstreamer packages fix security vulnerability

Publication date: 27 Jan 2017
URL: http://advisories.mageia.org/MGASA-2017-0021.html
Type: security
Affected Mageia releases: 5
CVE: CVE-2016-9811

Description:
Out of bounds heap read in windows_icon_typefind() in
gst/typefind/gsttypefindfunctions.c (CVE-2016-9811).

References:
- https://bugs.mageia.org/show_bug.cgi?id=19897
-
https://lists.fedoraproject.org/archives/list/package-ann...
-
https://lists.fedoraproject.org/archives/list/package-ann...
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9811

SRPMS:
- 5/core/gstreamer0.10-plugins-base-0.10.36-9.1.mga5
- 5/core/gstreamer1.0-plugins-base-1.4.3-2.1.mga5