full-disclosure - [ MDVSA-2009:035 ] gstreamer0.10-plugins-good

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1LX6Wy-00045v-M8@titan.mandriva.com>
Date: Wed, 11 Feb 2009 05:17:00 +0100
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2009:035 ] gstreamer0.10-plugins-good


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2009:035
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : gstreamer0.10-plugins-good
 Date    : February 10, 2009
 Affected: 2008.0, 2008.1, 2009.0
 _______________________________________________________________________

 Problem Description:

 Security vulnerabilities have been discovered and corrected in
 gstreamer0.10-plugins-good, might allow remote attackers to execute
 arbitrary code via a malformed QuickTime media file (CVE-2009-0386,
 CVE-2009-0387, CVE-2009-0397).
 
 The updated packages have been patched to prevent this.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0386
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0387
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0397
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2008.0:
 72a2a267f064b3557c0e7da869187920  2008.0/i586/gstreamer0.10-aalib-0.10.6-3.2mdv2008.0.i586.rpm
 fe8a04fcd9240eaa887fa5d1147c86e9  2008.0/i586/gstreamer0.10-caca-0.10.6-3.2mdv2008.0.i586.rpm
 639e4701b8431b8fff2df2d196ce3b6c  2008.0/i586/gstreamer0.10-dv-0.10.6-3.2mdv2008.0.i586.rpm
 c2a123762a863578a24d7ea82ab693cd  2008.0/i586/gstreamer0.10-esound-0.10.6-3.2mdv2008.0.i586.rpm
 8fe61dd52cd465ae43beb7e1ba311ce4  2008.0/i586/gstreamer0.10-flac-0.10.6-3.2mdv2008.0.i586.rpm
 a80a7ef4f5ac1d7280f4290d2c770485  2008.0/i586/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.i586.rpm
 97152f5ecea0a2c23b349191794f2700  2008.0/i586/gstreamer0.10-raw1394-0.10.6-3.2mdv2008.0.i586.rpm
 18ad6400d673b07d8f8037177873e144  2008.0/i586/gstreamer0.10-speex-0.10.6-3.2mdv2008.0.i586.rpm
 935441a9449d351bf3e0a6bfee3ac64a  2008.0/i586/gstreamer0.10-wavpack-0.10.6-3.2mdv2008.0.i586.rpm 
 f8e312ce8de8ac8d6d6e2bbfcdaf93aa  2008.0/SRPMS/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 a140386b0f5b582d8e64cc5584f86fde  2008.0/x86_64/gstreamer0.10-aalib-0.10.6-3.2mdv2008.0.x86_64.rpm
 5eb03a60b115cec41d78478b92586537  2008.0/x86_64/gstreamer0.10-caca-0.10.6-3.2mdv2008.0.x86_64.rpm
 564d6a79a523ad54d7f70c02a298bba1  2008.0/x86_64/gstreamer0.10-dv-0.10.6-3.2mdv2008.0.x86_64.rpm
 9cfbae1621e6e002f764e780194d0376  2008.0/x86_64/gstreamer0.10-esound-0.10.6-3.2mdv2008.0.x86_64.rpm
 a8e034c1ec0bcfb2c3048269940340ed  2008.0/x86_64/gstreamer0.10-flac-0.10.6-3.2mdv2008.0.x86_64.rpm
 d14231b2f55e4c9959b765d091e7bafd  2008.0/x86_64/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.x86_64.rpm
 312e887d320ae3c36597f3a2085f64e5  2008.0/x86_64/gstreamer0.10-raw1394-0.10.6-3.2mdv2008.0.x86_64.rpm
 f4ab3bc506034b9d2e4e64fded34b026  2008.0/x86_64/gstreamer0.10-speex-0.10.6-3.2mdv2008.0.x86_64.rpm
 4f9fc5a9aadc3350c32fe95bb4824c82  2008.0/x86_64/gstreamer0.10-wavpack-0.10.6-3.2mdv2008.0.x86_64.rpm 
 f8e312ce8de8ac8d6d6e2bbfcdaf93aa  2008.0/SRPMS/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.src.rpm

 Mandriva Linux 2008.1:
 37ee72c4dd8c4d1d65b21d5f7c4174cf  2008.1/i586/gstreamer0.10-aalib-0.10.7-3.2mdv2008.1.i586.rpm
 94bc8fbbd6b27f76172be895762a7d22  2008.1/i586/gstreamer0.10-caca-0.10.7-3.2mdv2008.1.i586.rpm
 4822f9a52e11966aa1a3b82e8636eafb  2008.1/i586/gstreamer0.10-dv-0.10.7-3.2mdv2008.1.i586.rpm
 ed36bf5b66d719c449de031c3973fbf5  2008.1/i586/gstreamer0.10-esound-0.10.7-3.2mdv2008.1.i586.rpm
 81bd4565763e2d857d05875fdc299d99  2008.1/i586/gstreamer0.10-flac-0.10.7-3.2mdv2008.1.i586.rpm
 fe7dd742de6d0510c337c743fe6da912  2008.1/i586/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.i586.rpm
 86f44f42f73a2eb0dea5dc83b11fa4cf  2008.1/i586/gstreamer0.10-raw1394-0.10.7-3.2mdv2008.1.i586.rpm
 831da1ff4308a0328280992f62137932  2008.1/i586/gstreamer0.10-speex-0.10.7-3.2mdv2008.1.i586.rpm
 6e7590f10fcc99ae46a7e4970df836de  2008.1/i586/gstreamer0.10-wavpack-0.10.7-3.2mdv2008.1.i586.rpm 
 f18f7ec53b3b8653e449c1aeecb31138  2008.1/SRPMS/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.src.rpm

 Mandriva Linux 2008.1/X86_64:
 e25059da03c9110f482e2fbf93fd8933  2008.1/x86_64/gstreamer0.10-aalib-0.10.7-3.2mdv2008.1.x86_64.rpm
 0dcb67eb17fa5b2268b7dd37233fb261  2008.1/x86_64/gstreamer0.10-caca-0.10.7-3.2mdv2008.1.x86_64.rpm
 2efe3887ed7e82ebe16843b083295db6  2008.1/x86_64/gstreamer0.10-dv-0.10.7-3.2mdv2008.1.x86_64.rpm
 1f59d9b91fb95b8b88671fd971ef3be2  2008.1/x86_64/gstreamer0.10-esound-0.10.7-3.2mdv2008.1.x86_64.rpm
 192b9d4522516d89ebe0b29dfe80107b  2008.1/x86_64/gstreamer0.10-flac-0.10.7-3.2mdv2008.1.x86_64.rpm
 0c7510e8bbaf11a984b5d43993fd6606  2008.1/x86_64/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.x86_64.rpm
 e78b8da20599d9b3557f3c2d7b3d64a0  2008.1/x86_64/gstreamer0.10-raw1394-0.10.7-3.2mdv2008.1.x86_64.rpm
 b2cadc38e7054fa29b2c39341b14c8f8  2008.1/x86_64/gstreamer0.10-speex-0.10.7-3.2mdv2008.1.x86_64.rpm
 6f70bd674d5c66af13910a768618dd2b  2008.1/x86_64/gstreamer0.10-wavpack-0.10.7-3.2mdv2008.1.x86_64.rpm 
 f18f7ec53b3b8653e449c1aeecb31138  2008.1/SRPMS/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.src.rpm

 Mandriva Linux 2009.0:
 fd0c54e1c7e9e89fee53b87afc6218e8  2009.0/i586/gstreamer0.10-aalib-0.10.10-2.1mdv2009.0.i586.rpm
 1e22dfe9f0a620be5d1842ce6651c416  2009.0/i586/gstreamer0.10-caca-0.10.10-2.1mdv2009.0.i586.rpm
 065cc2305d32afec3475f3f0e687a81b  2009.0/i586/gstreamer0.10-dv-0.10.10-2.1mdv2009.0.i586.rpm
 7d4158cbead8c2f257327fa947183889  2009.0/i586/gstreamer0.10-esound-0.10.10-2.1mdv2009.0.i586.rpm
 c12d76e19388a0bc96723252a6882a45  2009.0/i586/gstreamer0.10-flac-0.10.10-2.1mdv2009.0.i586.rpm
 5bd137ba566a3fbe0f7a58a293046923  2009.0/i586/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.i586.rpm
 2d8ffce05f943cde7237117e51816dc9  2009.0/i586/gstreamer0.10-pulse-0.10.10-2.1mdv2009.0.i586.rpm
 5546602310d369d1d9b784e9a4f47577  2009.0/i586/gstreamer0.10-raw1394-0.10.10-2.1mdv2009.0.i586.rpm
 fc4922a6c70a5c611647c5ec2f1ae9e7  2009.0/i586/gstreamer0.10-soup-0.10.10-2.1mdv2009.0.i586.rpm
 d42916979b54613c3be7591ade5da727  2009.0/i586/gstreamer0.10-speex-0.10.10-2.1mdv2009.0.i586.rpm
 c2581f15e3439fe5dbd7096541ad46e8  2009.0/i586/gstreamer0.10-wavpack-0.10.10-2.1mdv2009.0.i586.rpm 
 08723d4a2eaa0f5d564a34ae120d8390  2009.0/SRPMS/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 618b0f23135de1db4cc3a55f6c32973c  2009.0/x86_64/gstreamer0.10-aalib-0.10.10-2.1mdv2009.0.x86_64.rpm
 4fe0b93bb062c565b1bc1eb63d5d5642  2009.0/x86_64/gstreamer0.10-caca-0.10.10-2.1mdv2009.0.x86_64.rpm
 3b2b4a8704411fad70e9156dbad3ed4a  2009.0/x86_64/gstreamer0.10-dv-0.10.10-2.1mdv2009.0.x86_64.rpm
 860a46cac6e60a0d9a543c8e89f46584  2009.0/x86_64/gstreamer0.10-esound-0.10.10-2.1mdv2009.0.x86_64.rpm
 52bd426b3821c4d844999f5e3bfa77d9  2009.0/x86_64/gstreamer0.10-flac-0.10.10-2.1mdv2009.0.x86_64.rpm
 0f52a696ac6afdf0d8265872d1748a2a  2009.0/x86_64/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.x86_64.rpm
 5fb651ebf99b93fb346f734e9ca5cbfe  2009.0/x86_64/gstreamer0.10-pulse-0.10.10-2.1mdv2009.0.x86_64.rpm
 5f7e0823e61559dd0037a14328b13925  2009.0/x86_64/gstreamer0.10-raw1394-0.10.10-2.1mdv2009.0.x86_64.rpm
 ee78e14a1831e667338b486de297b4b1  2009.0/x86_64/gstreamer0.10-soup-0.10.10-2.1mdv2009.0.x86_64.rpm
 1678a544c7651cd119d2746e9c3949a1  2009.0/x86_64/gstreamer0.10-speex-0.10.10-2.1mdv2009.0.x86_64.rpm
 31ec957603b4a0deb044ec2f7c427cb0  2009.0/x86_64/gstreamer0.10-wavpack-0.10.10-2.1mdv2009.0.x86_64.rpm 
 08723d4a2eaa0f5d564a34ae120d8390  2009.0/SRPMS/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFJkiTqmqjQ0CJFipgRAgeoAKC1/4cDJT4jWm2bK3kdszfNjmGpmQCePJB4
49QMXQEqfHKT5vJgPag1/5s=
=ITtm
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/