SUSE-SU-2024:3295-1: important: Security update for gstreamer-plugins-bad
openSUSE-SU-2024:14341-1: moderate: libwireshark18-4.4.0-2.1 on GA media
openSUSE-SU-2024:14339-1: moderate: ffmpeg-5-5.1.4-13.1 on GA media
SUSE-SU-2024:3289-1: important: Security update for gstreamer-plugins-bad, libvpl
openSUSE-SU-2024:14340-1: moderate: python38-3.8.20-1.1 on GA media
openSUSE-SU-2024:14346-1: moderate: python311-3.11.9-7.1 on GA media
openSUSE-SU-2024:14342-1: moderate: assimp-devel-5.4.3-2.1 on GA media
openSUSE-SU-2024:14344-1: moderate: ffmpeg-6-6.1.1-9.1 on GA media
openSUSE-SU-2024:14345-1: moderate: python310-3.10.15-1.1 on GA media
openSUSE-SU-2024:14343-1: moderate: ffmpeg-4-4.4.4-14.1 on GA media
SUSE-SU-2024:3298-1: moderate: Security update for python-dnspython
SUSE-SU-2024:3295-1: important: Security update for gstreamer-plugins-bad
# Security update for gstreamer-plugins-bad
Announcement ID: SUSE-SU-2024:3295-1
Rating: important
References:
* bsc#1218534
* bsc#1219494
* bsc#1223263
* bsc#1226892
* bsc#1226897
* bsc#1226898
* bsc#1226899
* bsc#1226900
* bsc#1226901
* jsc#PED-10024
Cross-References:
* CVE-2023-22656
* CVE-2023-45221
* CVE-2023-47169
* CVE-2023-47282
* CVE-2023-48368
* CVE-2023-50186
CVSS scores:
* CVE-2023-22656 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
* CVE-2023-45221 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
* CVE-2023-47169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2023-47282 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
* CVE-2023-48368 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
* CVE-2023-50186 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.4
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Manager Proxy 4.3
* SUSE Manager Retail Branch Server 4.3
* SUSE Manager Server 4.3
An update that solves six vulnerabilities, contains one feature and has three
security fixes can now be installed.
## Description:
This update for gstreamer-plugins-bad fixes the following issues:
* Dropped support for libmfx to fix the following CVEs:
* libmfx: improper input validation (CVE-2023-48368, bsc#1226897)
* libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)
* libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)
* libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)
* libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Manager Proxy 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3295=1
* SUSE Manager Retail Branch Server 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-
Server-4.3-2024-3295=1
* SUSE Manager Server 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3295=1
* openSUSE Leap 15.4
zypper in -t patch SUSE-2024-3295=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3295=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3295=1
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4
zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3295=1
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3295=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3295=1
## Package List:
* SUSE Manager Proxy 4.3 (x86_64)
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* SUSE Manager Retail Branch Server 4.3 (x86_64)
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* SUSE Manager Server 4.3 (ppc64le s390x x86_64)
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstTranscoder-1_0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* typelib-1_0-GstVulkanWayland-1_0-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstVulkan-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstVulkanXCB-1_0-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgsttranscoder-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* gstreamer-transcoder-devel-1.20.1-150400.3.23.2
* gstreamer-transcoder-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsttranscoder-1_0-0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-transcoder-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* openSUSE Leap 15.4 (x86_64)
* libgstbadaudio-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-32bit-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-32bit-1.20.1-150400.3.23.2
* libgstva-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-32bit-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-32bit-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-32bit-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstva-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-32bit-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-32bit-debuginfo-1.20.1-150400.3.23.2
* openSUSE Leap 15.4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
* openSUSE Leap 15.4 (aarch64_ilp32)
* libgstmpegts-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-64bit-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-64bit-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-64bit-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstva-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstplay-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-64bit-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-64bit-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-64bit-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-64bit-debuginfo-1.20.1-150400.3.23.2
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x
x86_64)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* libgstcodecs-1_0-0-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstva-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-devel-1.20.1-150400.3.23.2
* libgstplay-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debugsource-1.20.1-150400.3.23.2
* typelib-1_0-GstMpegts-1_0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlay-1_0-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-debuginfo-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-1.20.1-150400.3.23.2
* libgstsctp-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplay-1_0-0-1.20.1-150400.3.23.2
* libgstmpegts-1_0-0-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstPlayer-1_0-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-debuginfo-1.20.1-150400.3.23.2
* libgstinsertbin-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstphotography-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstBadAudio-1_0-1.20.1-150400.3.23.2
* libgstvulkan-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstplayer-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwebrtc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstWebRTC-1_0-1.20.1-150400.3.23.2
* gstreamer-plugins-bad-chromaprint-1.20.1-150400.3.23.2
* libgstbadaudio-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstwayland-1_0-0-1.20.1-150400.3.23.2
* libgstva-1_0-0-1.20.1-150400.3.23.2
* libgstcodecs-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-debuginfo-1.20.1-150400.3.23.2
* libgstadaptivedemux-1_0-0-1.20.1-150400.3.23.2
* libgstisoff-1_0-0-debuginfo-1.20.1-150400.3.23.2
* typelib-1_0-GstInsertBin-1_0-1.20.1-150400.3.23.2
* libgsturidownloader-1_0-0-1.20.1-150400.3.23.2
* libgstcodecparsers-1_0-0-1.20.1-150400.3.23.2
* typelib-1_0-GstCodecs-1_0-1.20.1-150400.3.23.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
* gstreamer-plugins-bad-lang-1.20.1-150400.3.23.2
## References:
* https://www.suse.com/security/cve/CVE-2023-22656.html
* https://www.suse.com/security/cve/CVE-2023-45221.html
* https://www.suse.com/security/cve/CVE-2023-47169.html
* https://www.suse.com/security/cve/CVE-2023-47282.html
* https://www.suse.com/security/cve/CVE-2023-48368.html
* https://www.suse.com/security/cve/CVE-2023-50186.html
* https://bugzilla.suse.com/show_bug.cgi?id=1218534
* https://bugzilla.suse.com/show_bug.cgi?id=1219494
* https://bugzilla.suse.com/show_bug.cgi?id=1223263
* https://bugzilla.suse.com/show_bug.cgi?id=1226892
* https://bugzilla.suse.com/show_bug.cgi?id=1226897
* https://bugzilla.suse.com/show_bug.cgi?id=1226898
* https://bugzilla.suse.com/show_bug.cgi?id=1226899
* https://bugzilla.suse.com/show_bug.cgi?id=1226900
* https://bugzilla.suse.com/show_bug.cgi?id=1226901
* https://jira.suse.com/browse/PED-10024
openSUSE-SU-2024:14341-1: moderate: libwireshark18-4.4.0-2.1 on GA media
# libwireshark18-4.4.0-2.1 on GA media
Announcement ID: openSUSE-SU-2024:14341-1
Rating: moderate
Cross-References:
* CVE-2024-8645
CVSS scores:
* CVE-2024-8645 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
* CVE-2024-8645 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the libwireshark18-4.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* libwireshark18 4.4.0-2.1
* libwiretap15 4.4.0-2.1
* libwsutil16 4.4.0-2.1
* wireshark 4.4.0-2.1
* wireshark-devel 4.4.0-2.1
* wireshark-ui-qt 4.4.0-2.1
## References:
* https://www.suse.com/security/cve/CVE-2024-8645.html
openSUSE-SU-2024:14339-1: moderate: ffmpeg-5-5.1.4-13.1 on GA media
# ffmpeg-5-5.1.4-13.1 on GA media
Announcement ID: openSUSE-SU-2024:14339-1
Rating: moderate
Cross-References:
* CVE-2024-7055
CVSS scores:
* CVE-2024-7055 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the ffmpeg-5-5.1.4-13.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* ffmpeg-5 5.1.4-13.1
* ffmpeg-5-libavcodec-devel 5.1.4-13.1
* ffmpeg-5-libavdevice-devel 5.1.4-13.1
* ffmpeg-5-libavfilter-devel 5.1.4-13.1
* ffmpeg-5-libavformat-devel 5.1.4-13.1
* ffmpeg-5-libavutil-devel 5.1.4-13.1
* ffmpeg-5-libpostproc-devel 5.1.4-13.1
* ffmpeg-5-libswresample-devel 5.1.4-13.1
* ffmpeg-5-libswscale-devel 5.1.4-13.1
* ffmpeg-5-private-devel 5.1.4-13.1
* libavcodec59 5.1.4-13.1
* libavcodec59-32bit 5.1.4-13.1
* libavdevice59 5.1.4-13.1
* libavdevice59-32bit 5.1.4-13.1
* libavfilter8 5.1.4-13.1
* libavfilter8-32bit 5.1.4-13.1
* libavformat59 5.1.4-13.1
* libavformat59-32bit 5.1.4-13.1
* libavutil57 5.1.4-13.1
* libavutil57-32bit 5.1.4-13.1
* libpostproc56 5.1.4-13.1
* libpostproc56-32bit 5.1.4-13.1
* libswresample4_ff5 5.1.4-13.1
* libswresample4_ff5-32bit 5.1.4-13.1
* libswscale6 5.1.4-13.1
* libswscale6-32bit 5.1.4-13.1
## References:
* https://www.suse.com/security/cve/CVE-2024-7055.html
SUSE-SU-2024:3289-1: important: Security update for gstreamer-plugins-bad, libvpl
# Security update for gstreamer-plugins-bad, libvpl
Announcement ID: SUSE-SU-2024:3289-1
Rating: important
References:
* bsc#1218534
* bsc#1219494
* bsc#1223263
* bsc#1226892
* bsc#1226897
* bsc#1226898
* bsc#1226899
* bsc#1226900
* bsc#1226901
* jsc#PED-10024
Cross-References:
* CVE-2023-22656
* CVE-2023-45221
* CVE-2023-47169
* CVE-2023-47282
* CVE-2023-48368
* CVE-2023-50186
CVSS scores:
* CVE-2023-22656 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
* CVE-2023-45221 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
* CVE-2023-47169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2023-47282 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
* CVE-2023-48368 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
* CVE-2023-50186 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* Basesystem Module 15-SP5
* Desktop Applications Module 15-SP5
* Desktop Applications Module 15-SP6
* openSUSE Leap 15.5
* SUSE Linux Enterprise Desktop 15 SP5
* SUSE Linux Enterprise Desktop 15 SP6
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise Micro 5.5
* SUSE Linux Enterprise Real Time 15 SP5
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Package Hub 15 15-SP5
An update that solves six vulnerabilities, contains one feature and has three
security fixes can now be installed.
## Description:
This update for gstreamer-plugins-bad, libvpl fixes the following issues:
* Dropped support for libmfx to fix the following CVEs:
* libmfx: improper input validation (CVE-2023-48368, bsc#1226897)
* libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)
* libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)
* libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)
* libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)
The libmfx dependency is replaced by libvpl.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Package Hub 15 15-SP5
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3289=1
* openSUSE Leap 15.5
zypper in -t patch SUSE-2024-3289=1 openSUSE-SLE-15.5-2024-3289=1
* Basesystem Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3289=1
* Desktop Applications Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-3289=1
* Desktop Applications Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3289=1
## Package List:
* SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64)
* libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debugsource-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.25.2
* libgsttranscoder-1_0-0-1.22.0-150500.3.25.2
* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
* gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstVa-1_0-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstplay-1_0-0-1.22.0-150500.3.25.2
* libgstplay-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstCuda-1_0-1.22.0-150500.3.25.2
* typelib-1_0-GstVulkanWayland-1_0-1.22.0-150500.3.25.2
* libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-CudaGst-1_0-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-1.22.0-150500.3.25.2
* typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-transcoder-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstPlay-1_0-1.22.0-150500.3.25.2
* typelib-1_0-GstVulkanXCB-1_0-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-1.22.0-150500.3.25.2
* gstreamer-transcoder-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstva-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.25.2
* typelib-1_0-GstTranscoder-1_0-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-1.22.0-150500.3.25.2
* typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-1.22.0-150500.3.25.2
* libgsttranscoder-1_0-0-1.22.0-150500.3.25.2
* typelib-1_0-GstVulkan-1_0-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debugsource-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.25.2
* gstreamer-transcoder-devel-1.22.0-150500.3.25.2
* typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-devel-1.22.0-150500.3.25.2
* libgstva-1_0-0-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-debuginfo-1.22.0-150500.3.25.2
* openSUSE Leap 15.5 (x86_64)
* libgstisoff-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-32bit-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-32bit-1.22.0-150500.3.25.2
* libvpl-debugsource-2023.0.0-150500.3.2.1
* libgstplayer-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libvpl-devel-2023.0.0-150500.3.2.1
* gstreamer-plugins-bad-chromaprint-32bit-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-32bit-1.22.0-150500.3.25.2
* libvpl2-debuginfo-2023.0.0-150500.3.2.1
* libgstwebrtcnice-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstplay-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstva-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-32bit-1.22.0-150500.3.25.2
* libvpl-2023.0.0-150500.3.2.1
* libvpl2-2023.0.0-150500.3.2.1
* libgstcodecs-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-32bit-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-chromaprint-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstva-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-32bit-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstplay-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-32bit-debuginfo-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-32bit-debuginfo-1.22.0-150500.3.25.2
* openSUSE Leap 15.5 (noarch)
* gstreamer-plugins-bad-lang-1.22.0-150500.3.25.2
* openSUSE Leap 15.5 (aarch64_ilp32)
* libgstinsertbin-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstplay-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstva-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstva-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-chromaprint-64bit-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-64bit-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-64bit-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-64bit-1.22.0-150500.3.25.2
* libgstplay-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-64bit-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-64bit-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-chromaprint-64bit-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-64bit-debuginfo-1.22.0-150500.3.25.2
* Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)
* libgstplayer-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debugsource-1.22.0-150500.3.25.2
* libgstphotography-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.25.2
* libgstplayer-1_0-0-1.22.0-150500.3.25.2
* libgstplay-1_0-0-1.22.0-150500.3.25.2
* libgstplay-1_0-0-debuginfo-1.22.0-150500.3.25.2
* Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64)
* gstreamer-plugins-bad-chromaprint-debuginfo-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstVa-1_0-1.22.0-150500.3.25.2
* libgsturidownloader-1_0-0-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-chromaprint-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-1.22.0-150500.3.25.2
* libgstbadaudio-1_0-0-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstCuda-1_0-1.22.0-150500.3.25.2
* libgsttranscoder-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstBadAudio-1_0-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-CudaGst-1_0-1.22.0-150500.3.25.2
* libgstmpegts-1_0-0-1.22.0-150500.3.25.2
* typelib-1_0-GstInsertBin-1_0-1.22.0-150500.3.25.2
* libgstinsertbin-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstPlay-1_0-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-1.22.0-150500.3.25.2
* libgstva-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstCodecs-1_0-1.22.0-150500.3.25.2
* typelib-1_0-GstWebRTC-1_0-1.22.0-150500.3.25.2
* libgstsctp-1_0-0-1.22.0-150500.3.25.2
* libgstcodecs-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-1.22.0-150500.3.25.2
* libgsttranscoder-1_0-0-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debuginfo-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-1.22.0-150500.3.25.2
* libgstisoff-1_0-0-1.22.0-150500.3.25.2
* libgstadaptivedemux-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstcodecparsers-1_0-0-debuginfo-1.22.0-150500.3.25.2
* libgstvulkan-1_0-0-1.22.0-150500.3.25.2
* libgstwebrtcnice-1_0-0-debuginfo-1.22.0-150500.3.25.2
* typelib-1_0-GstMpegts-1_0-1.22.0-150500.3.25.2
* libgstwayland-1_0-0-debuginfo-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-debugsource-1.22.0-150500.3.25.2
* libgstwebrtc-1_0-0-1.22.0-150500.3.25.2
* libgstbasecamerabinsrc-1_0-0-1.22.0-150500.3.25.2
* typelib-1_0-GstPlayer-1_0-1.22.0-150500.3.25.2
* gstreamer-plugins-bad-devel-1.22.0-150500.3.25.2
* libgstva-1_0-0-1.22.0-150500.3.25.2
* libgstcuda-1_0-0-debuginfo-1.22.0-150500.3.25.2
* Desktop Applications Module 15-SP5 (noarch)
* gstreamer-plugins-bad-lang-1.22.0-150500.3.25.2
* Desktop Applications Module 15-SP5 (x86_64)
* libvpl-debugsource-2023.0.0-150500.3.2.1
* libvpl-devel-2023.0.0-150500.3.2.1
* libvpl-2023.0.0-150500.3.2.1
* libvpl2-2023.0.0-150500.3.2.1
* libvpl2-debuginfo-2023.0.0-150500.3.2.1
* Desktop Applications Module 15-SP6 (x86_64)
* libvpl-debugsource-2023.0.0-150500.3.2.1
* libvpl-devel-2023.0.0-150500.3.2.1
* libvpl-2023.0.0-150500.3.2.1
* libvpl2-2023.0.0-150500.3.2.1
* libvpl2-debuginfo-2023.0.0-150500.3.2.1
## References:
* https://www.suse.com/security/cve/CVE-2023-22656.html
* https://www.suse.com/security/cve/CVE-2023-45221.html
* https://www.suse.com/security/cve/CVE-2023-47169.html
* https://www.suse.com/security/cve/CVE-2023-47282.html
* https://www.suse.com/security/cve/CVE-2023-48368.html
* https://www.suse.com/security/cve/CVE-2023-50186.html
* https://bugzilla.suse.com/show_bug.cgi?id=1218534
* https://bugzilla.suse.com/show_bug.cgi?id=1219494
* https://bugzilla.suse.com/show_bug.cgi?id=1223263
* https://bugzilla.suse.com/show_bug.cgi?id=1226892
* https://bugzilla.suse.com/show_bug.cgi?id=1226897
* https://bugzilla.suse.com/show_bug.cgi?id=1226898
* https://bugzilla.suse.com/show_bug.cgi?id=1226899
* https://bugzilla.suse.com/show_bug.cgi?id=1226900
* https://bugzilla.suse.com/show_bug.cgi?id=1226901
* https://jira.suse.com/browse/PED-10024
openSUSE-SU-2024:14340-1: moderate: python38-3.8.20-1.1 on GA media
# python38-3.8.20-1.1 on GA media
Announcement ID: openSUSE-SU-2024:14340-1
Rating: moderate
Cross-References:
* CVE-2024-4030
* CVE-2024-6232
CVSS scores:
* CVE-2024-4030 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
* CVE-2024-6232 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-6232 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Affected Products:
* openSUSE Tumbleweed
An update that solves 2 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the python38-3.8.20-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* python38 3.8.20-1.1
* python38-curses 3.8.20-1.1
* python38-dbm 3.8.20-1.1
* python38-idle 3.8.20-1.1
* python38-tk 3.8.20-1.1
## References:
* https://www.suse.com/security/cve/CVE-2024-4030.html
* https://www.suse.com/security/cve/CVE-2024-6232.html
openSUSE-SU-2024:14346-1: moderate: python311-3.11.9-7.1 on GA media
# python311-3.11.9-7.1 on GA media
Announcement ID: openSUSE-SU-2024:14346-1
Rating: moderate
Cross-References:
* CVE-2024-4030
* CVE-2024-6232
* CVE-2024-7592
CVSS scores:
* CVE-2024-4030 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
* CVE-2024-6232 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-6232 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
* CVE-2024-7592 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
Affected Products:
* openSUSE Tumbleweed
An update that solves 3 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the python311-3.11.9-7.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* python311 3.11.9-7.1
* python311-32bit 3.11.10-1.1
* python311-curses 3.11.9-7.1
* python311-dbm 3.11.9-7.1
* python311-idle 3.11.9-7.1
* python311-tk 3.11.9-7.1
* python311-x86-64-v3 3.11.9-7.1
## References:
* https://www.suse.com/security/cve/CVE-2024-4030.html
* https://www.suse.com/security/cve/CVE-2024-6232.html
* https://www.suse.com/security/cve/CVE-2024-7592.html
openSUSE-SU-2024:14342-1: moderate: assimp-devel-5.4.3-2.1 on GA media
# assimp-devel-5.4.3-2.1 on GA media
Announcement ID: openSUSE-SU-2024:14342-1
Rating: moderate
Cross-References:
* CVE-2024-45679
CVSS scores:
* CVE-2024-45679 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-45679 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the assimp-devel-5.4.3-2.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* assimp-devel 5.4.3-2.1
* libassimp5 5.4.3-2.1
## References:
* https://www.suse.com/security/cve/CVE-2024-45679.html
openSUSE-SU-2024:14344-1: moderate: ffmpeg-6-6.1.1-9.1 on GA media
# ffmpeg-6-6.1.1-9.1 on GA media
Announcement ID: openSUSE-SU-2024:14344-1
Rating: moderate
Cross-References:
* CVE-2024-7055
CVSS scores:
* CVE-2024-7055 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the ffmpeg-6-6.1.1-9.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* ffmpeg-6 6.1.1-9.1
* ffmpeg-6-libavcodec-devel 6.1.1-9.1
* ffmpeg-6-libavdevice-devel 6.1.1-9.1
* ffmpeg-6-libavfilter-devel 6.1.1-9.1
* ffmpeg-6-libavformat-devel 6.1.1-9.1
* ffmpeg-6-libavutil-devel 6.1.1-9.1
* ffmpeg-6-libpostproc-devel 6.1.1-9.1
* ffmpeg-6-libswresample-devel 6.1.1-9.1
* ffmpeg-6-libswscale-devel 6.1.1-9.1
* libavcodec60 6.1.1-9.1
* libavcodec60-32bit 6.1.1-9.1
* libavdevice60 6.1.1-9.1
* libavdevice60-32bit 6.1.1-9.1
* libavfilter9 6.1.1-9.1
* libavfilter9-32bit 6.1.1-9.1
* libavformat60 6.1.1-9.1
* libavformat60-32bit 6.1.1-9.1
* libavutil58 6.1.1-9.1
* libavutil58-32bit 6.1.1-9.1
* libpostproc57 6.1.1-9.1
* libpostproc57-32bit 6.1.1-9.1
* libswresample4 6.1.1-9.1
* libswresample4-32bit 6.1.1-9.1
* libswscale7 6.1.1-9.1
* libswscale7-32bit 6.1.1-9.1
## References:
* https://www.suse.com/security/cve/CVE-2024-7055.html
openSUSE-SU-2024:14345-1: moderate: python310-3.10.15-1.1 on GA media
# python310-3.10.15-1.1 on GA media
Announcement ID: openSUSE-SU-2024:14345-1
Rating: moderate
Cross-References:
* CVE-2024-4030
* CVE-2024-6232
* CVE-2024-7592
CVSS scores:
* CVE-2024-4030 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
* CVE-2024-6232 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-6232 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
* CVE-2024-7592 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
Affected Products:
* openSUSE Tumbleweed
An update that solves 3 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the python310-3.10.15-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* python310 3.10.15-1.1
* python310-32bit 3.10.15-1.1
* python310-curses 3.10.15-1.1
* python310-dbm 3.10.15-1.1
* python310-idle 3.10.15-1.1
* python310-tk 3.10.15-1.1
## References:
* https://www.suse.com/security/cve/CVE-2024-4030.html
* https://www.suse.com/security/cve/CVE-2024-6232.html
* https://www.suse.com/security/cve/CVE-2024-7592.html
openSUSE-SU-2024:14343-1: moderate: ffmpeg-4-4.4.4-14.1 on GA media
# ffmpeg-4-4.4.4-14.1 on GA media
Announcement ID: openSUSE-SU-2024:14343-1
Rating: moderate
Cross-References:
* CVE-2024-7055
CVSS scores:
* CVE-2024-7055 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the ffmpeg-4-4.4.4-14.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* ffmpeg-4 4.4.4-14.1
* ffmpeg-4-libavcodec-devel 4.4.4-14.1
* ffmpeg-4-libavdevice-devel 4.4.4-14.1
* ffmpeg-4-libavfilter-devel 4.4.4-14.1
* ffmpeg-4-libavformat-devel 4.4.4-14.1
* ffmpeg-4-libavresample-devel 4.4.4-14.1
* ffmpeg-4-libavutil-devel 4.4.4-14.1
* ffmpeg-4-libpostproc-devel 4.4.4-14.1
* ffmpeg-4-libswresample-devel 4.4.4-14.1
* ffmpeg-4-libswscale-devel 4.4.4-14.1
* ffmpeg-4-private-devel 4.4.4-14.1
* libavcodec58_134 4.4.4-14.1
* libavcodec58_134-32bit 4.4.4-14.1
* libavdevice58_13 4.4.4-14.1
* libavdevice58_13-32bit 4.4.4-14.1
* libavfilter7_110 4.4.4-14.1
* libavfilter7_110-32bit 4.4.4-14.1
* libavformat58_76 4.4.4-14.1
* libavformat58_76-32bit 4.4.4-14.1
* libavresample4_0 4.4.4-14.1
* libavresample4_0-32bit 4.4.4-14.1
* libavutil56_70 4.4.4-14.1
* libavutil56_70-32bit 4.4.4-14.1
* libpostproc55_9 4.4.4-14.1
* libpostproc55_9-32bit 4.4.4-14.1
* libswresample3_9 4.4.4-14.1
* libswresample3_9-32bit 4.4.4-14.1
* libswscale5_9 4.4.4-14.1
* libswscale5_9-32bit 4.4.4-14.1
## References:
* https://www.suse.com/security/cve/CVE-2024-7055.html
SUSE-SU-2024:3298-1: moderate: Security update for python-dnspython
# Security update for python-dnspython
Announcement ID: SUSE-SU-2024:3298-1
Rating: moderate
References:
* bsc#1230353
Cross-References:
* CVE-2023-29483
CVSS scores:
* CVE-2023-29483 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
* Basesystem Module 15-SP5
* Basesystem Module 15-SP6
* openSUSE Leap 15.5
* openSUSE Leap Micro 5.5
* SUSE Enterprise Storage 7.1
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4
* SUSE Linux Enterprise Desktop 15 SP5
* SUSE Linux Enterprise Desktop 15 SP6
* SUSE Linux Enterprise High Performance Computing 15 SP2
* SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise Micro 5.3
* SUSE Linux Enterprise Micro 5.4
* SUSE Linux Enterprise Micro 5.5
* SUSE Linux Enterprise Micro for Rancher 5.3
* SUSE Linux Enterprise Micro for Rancher 5.4
* SUSE Linux Enterprise Real Time 15 SP5
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15 SP2
* SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP2
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Manager Proxy 4.3
* SUSE Manager Retail Branch Server 4.3
* SUSE Manager Server 4.3
* SUSE Package Hub 15 15-SP5
* SUSE Package Hub 15 15-SP6
An update that solves one vulnerability can now be installed.
## Description:
This update for python-dnspython fixes the following issue:
* Fix CVE-2023-29483 (bsc#1230353).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap Micro 5.5
zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3298=1
* openSUSE Leap 15.5
zypper in -t patch openSUSE-SLE-15.5-2024-3298=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2024-3298=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2024-3298=1
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2024-3298=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2024-3298=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2024-3298=1
* Basesystem Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3298=1
* Basesystem Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3298=1
* SUSE Package Hub 15 15-SP5
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3298=1
* SUSE Package Hub 15 15-SP6
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3298=1
* SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3298=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3298=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3298=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3298=1
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4
zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3298=1
* SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3298=1
* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3298=1
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3298=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP2
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3298=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3298=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3298=1
* SUSE Manager Proxy 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3298=1
* SUSE Manager Retail Branch Server 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-
Server-4.3-2024-3298=1
* SUSE Manager Server 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3298=1
* SUSE Enterprise Storage 7.1
zypper in -t patch SUSE-Storage-7.1-2024-3298=1
## Package List:
* openSUSE Leap Micro 5.5 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* openSUSE Leap 15.5 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Micro for Rancher 5.3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Micro 5.3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Micro for Rancher 5.4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Micro 5.4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Micro 5.5 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* Basesystem Module 15-SP5 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* Basesystem Module 15-SP6 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Package Hub 15 15-SP5 (noarch)
* python2-dnspython-1.15.0-150000.3.10.2
* SUSE Package Hub 15 15-SP6 (noarch)
* python2-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Manager Proxy 4.3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Manager Retail Branch Server 4.3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Manager Server 4.3 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
* SUSE Enterprise Storage 7.1 (noarch)
* python3-dnspython-1.15.0-150000.3.10.2
## References:
* https://www.suse.com/security/cve/CVE-2023-29483.html
* https://bugzilla.suse.com/show_bug.cgi?id=1230353
