-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4437-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff April 29, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : gst-plugins-base1.0 CVE ID : CVE-2019-9928 It was discovered that a buffer overflow in the RTSP parser of the GStreamer media framework may result in the execution of arbitrary code if a malformed RSTP stream is opened. For the stable distribution (stretch), this problem has been fixed in version 1.10.4-1+deb9u1. We recommend that you upgrade your gst-plugins-base1.0 packages. For the detailed security status of gst-plugins-base1.0 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/gst-plugins-base1.0 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlzHYwUACgkQEMKTtsN8 TjbH2hAAiSBUDHF9gzqlDsbKXMeO4NPJy/udFrqFoXqGvjd+Z+hi8hmRUOP3YAr5 gHjsjp4PCwAZCgcu9mFFuP44brgkKJmZfL+J8nccusbUb+QzbapZYx8ZFr1rshmN LiBaTc4+enyXBZsonywqueXX1v1qXNTPuTnBlq4/348RIv1+8p0PUMLGw5tk8k0Z Q822Tj0mrVvwgkt8hj2Z/LdU2Vjx6LALRHZdgbQL4Qu0yEhQakM1HqDOYLTVUmP1 80sXF86uZe2M+H/1A/MkwbGQK2y4EJr8IgbO1e1Oyym0oGp+pT/Aleli6a+IqqHw bOApdjMtrXgtaaxCjRSfAL5mk1oy6WcpviJ/PYoRkCrNqMXaPidK8PcsoEEeDTWE aVSpco/lWj7KLveJqKDzVAK0gn5Gm3LfyuqpmrFnJMBfvvKhGnB3bHXe/fc9tNZK H7+rAs5GnVJaJR6vTUV4e1rxeBAKsSEVuPZF7U1wD3CEC6tTnlM4LVPiiugykoP1 01fA+2OtpkFzdatwzy7nKCbAWX0wr9nFxX+EfXyWmaedJR9vYHUH0wicwwRuHMTn 1y9//Son4stf5wlW36qwtGkZn+fhQGsYU66FbVc5cfCxC7vwbbKiBiaNp4c4aiCy ReqQs0XRgiFl3x6d047agSuw1+vWucXKVEZdrNRPZ00vfJyrZAc= =AKVc -----END PGP SIGNATURE-----
