SUSE-SU-2025:0055-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-20250055-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:0055-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:0055-1
- Upstream
- Related
- Published
- 2025-01-09T16:36:54Z
- Modified
- 2025-05-08T17:33:55.537471Z
- Summary
- Security update for gstreamer-plugins-good
- Details
-
This update for gstreamer-plugins-good fixes the following issues:
- CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. (boo#1234449)
- CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414)
- CVE-2024-47539: Fixed an out-of-bounds write in converttos334_1a. (boo#1234417)
- CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421)
- CVE-2024-47596: Fixed an integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads. (boo#1234424)
- CVE-2024-47597: Fixed an out-of-bounds reads in MP4/MOV demuxer sample table parser (boo#1234425)
- CVE-2024-47598: Fixed MP4/MOV sample table parser out-of-bounds read. (boo#1234426)
- CVE-2024-47599: Fixed insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences. (boo#1234427)
- CVE-2024-47601: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234428)
- CVE-2024-47602: Fixed a NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer. (boo#1234432)
- CVE-2024-47603: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234433)
- CVE-2024-47775: Fixed various out-of-bounds reads in WAV parser. (boo#1234434)
- CVE-2024-47776: Fixed various out-of-bounds reads in WAV parser. (boo#1234435)
- CVE-2024-47777: Fixed various out-of-bounds reads in WAV parser. (boo#1234436)
- CVE-2024-47778: Fixed various out-of-bounds reads in WAV parser. (boo#1234439)
- CVE-2024-47834: Fixed a use-after-free in the Matroska demuxer that can cause crashes for certain input files. (boo#1234440)
- CVE-2024-47774: Fixed an integer overflow in AVI subtitle parser that leads to out-of-bounds reads. (boo#1234446)
- CVE-2024-47613: Fixed a NULL-pointer dereference in gdk-pixbuf decoder. (boo#1234447)
- CVE-2024-47543: Fixed an out-of-bounds write in qtdemuxparsecontainer. (boo#1234462)
- CVE-2024-47544: Fixed a NULL-pointer dereferences in MP4/MOV demuxer CENC handling. (boo#1234473)
- CVE-2024-47545: Fixed an integer underflow in FOURCC_strf parsing leading to out-of-bounds read. (boo#1234476)
- CVE-2024-47546: Fixed an integer underflow in extractccfrom_data leading to out-of-bounds read. (boo#1234477)
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-20250055-1/
- https://bugzilla.suse.com/1234414
- https://bugzilla.suse.com/1234417
- https://bugzilla.suse.com/1234421
- https://bugzilla.suse.com/1234424
- https://bugzilla.suse.com/1234425
- https://bugzilla.suse.com/1234426
- https://bugzilla.suse.com/1234427
- https://bugzilla.suse.com/1234428
- https://bugzilla.suse.com/1234432
- https://bugzilla.suse.com/1234433
- https://bugzilla.suse.com/1234434
- https://bugzilla.suse.com/1234435
- https://bugzilla.suse.com/1234436
- https://bugzilla.suse.com/1234439
- https://bugzilla.suse.com/1234440
- https://bugzilla.suse.com/1234446
- https://bugzilla.suse.com/1234447
- https://bugzilla.suse.com/1234449
- https://bugzilla.suse.com/1234462
- https://bugzilla.suse.com/1234473
- https://bugzilla.suse.com/1234476
- https://bugzilla.suse.com/1234477
- https://www.suse.com/security/cve/CVE-2024-47537
- https://www.suse.com/security/cve/CVE-2024-47539
- https://www.suse.com/security/cve/CVE-2024-47540
- https://www.suse.com/security/cve/CVE-2024-47543
- https://www.suse.com/security/cve/CVE-2024-47544
- https://www.suse.com/security/cve/CVE-2024-47545
- https://www.suse.com/security/cve/CVE-2024-47546
- https://www.suse.com/security/cve/CVE-2024-47596
- https://www.suse.com/security/cve/CVE-2024-47597
- https://www.suse.com/security/cve/CVE-2024-47598
- https://www.suse.com/security/cve/CVE-2024-47599
- https://www.suse.com/security/cve/CVE-2024-47601
- https://www.suse.com/security/cve/CVE-2024-47602
- https://www.suse.com/security/cve/CVE-2024-47603
- https://www.suse.com/security/cve/CVE-2024-47606
- https://www.suse.com/security/cve/CVE-2024-47613
- https://www.suse.com/security/cve/CVE-2024-47774
- https://www.suse.com/security/cve/CVE-2024-47775
- https://www.suse.com/security/cve/CVE-2024-47776
- https://www.suse.com/security/cve/CVE-2024-47777
- https://www.suse.com/security/cve/CVE-2024-47778
- https://www.suse.com/security/cve/CVE-2024-47834
Affected packages
openSUSE:Leap 15.6
gstreamer-plugins-good
Package
- Name
- gstreamer-plugins-good
- Purl
- pkg:rpm/opensuse/gstreamer-plugins-good&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.24.0-150600.3.3.1
Ecosystem specific
{
"binaries": [
{
"gstreamer-plugins-good-extra": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-gtk": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-extra-32bit": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-jack": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-32bit": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-jack-32bit": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-qtqml": "1.24.0-150600.3.3.1",
"gstreamer-plugins-good-lang": "1.24.0-150600.3.3.1"
}
]
}