From 3cbd41ee009093d79cc524ec8e8394e6c2e2451d Mon Sep 17 00:00:00 2001 From: Thorsten Alteholz Date: Mon, 6 Apr 2020 08:31:28 +0200 Subject: dla 2164 --- english/lts/security/2020/dla-2164.data | 10 ++++++++++ english/lts/security/2020/dla-2164.wml | 23 +++++++++++++++++++++++ 2 files changed, 33 insertions(+) create mode 100644 english/lts/security/2020/dla-2164.data create mode 100644 english/lts/security/2020/dla-2164.wml diff --git a/english/lts/security/2020/dla-2164.data b/english/lts/security/2020/dla-2164.data new file mode 100644 index 00000000000..ed3df1cf704 --- /dev/null +++ b/english/lts/security/2020/dla-2164.data @@ -0,0 +1,10 @@ +DLA-2164-1 gst-plugins-bad0.10 +2020-3-31 +CVE-2015-0797 CVE-2016-9809 CVE-2017-5843 CVE-2017-5848 +gst-plugins-bad0.10 +yes +yes +no + +#use wml::debian::security + diff --git a/english/lts/security/2020/dla-2164.wml b/english/lts/security/2020/dla-2164.wml new file mode 100644 index 00000000000..bf6b74327eb --- /dev/null +++ b/english/lts/security/2020/dla-2164.wml @@ -0,0 +1,23 @@ +LTS security update + + +

Several issues have been found in gst-plugins-bad0.10, a package +containing GStreamer plugins from the bad set.

+ +

All issues are about use-after-free, out of bounds reads or buffer +overflow in different modules.

+ + +

For Debian 8 Jessie, these problems have been fixed in version +0.10.23-7.4+deb8u3.

+ +

We recommend that you upgrade your gst-plugins-bad0.10 packages.

+ +

Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: https://wiki.debian.org/LTS

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2020/dla-2164.data" +# $Id: $ -- cgit v1.2.3