Debian alert DLA-3504-1 (gst-plugins-base1.0)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 3504-1] gst-plugins-base1.0 security update
Date:
             
 
Tue, 25 Jul 2023 17:10:09 +0000
Message-ID:
             
 
<alpine.DEB.2.21.2307251709090.31280@postfach.intern.alteholz.me>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3504-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
July 25, 2023                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : gst-plugins-base1.0
Version        : 1.14.4-2+deb10u2
CVE ID         : CVE-2023-37328


Multiple multiple vulnerabilities were discovered in plugins for the 
GStreamer media framework and its codecs and demuxers, which may result in 
denial of service or potentially the execution of arbitrary code if a 
malformed media file is opened.


For Debian 10 buster, this problem has been fixed in version
1.14.4-2+deb10u2.

We recommend that you upgrade your gst-plugins-base1.0 packages.

For the detailed security status of gst-plugins-base1.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gst-plugins-base1.0

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=2aTB
-----END PGP SIGNATURE-----