A gst-plugins-bad1.0 security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address multiple vulnerabilities.
ELA-993-1 gst-plugins-bad1.0 security update
Package : gst-plugins-bad1.0
Version : 1.4.4-2.1+deb8u6 (jessie), 1.10.4-1+deb9u4 (stretch)
Related CVEs :
CVE-2023-40474
CVE-2023-40475
CVE-2023-40476
Multiple vulnerabilities were discovered in plugins for the GStreamer
media framework and its codecs and demuxers, which may result in denial
of service or potentially the execution of arbitrary code if a malformed
media file is opened.
