From 3d8062a7f9e98008abaa8d277423aa9540256c226c1a4f6b373baf3f11faa81d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Lie?= Date: Tue, 7 Jan 2025 21:25:38 +0000 Subject: [PATCH] Another CVE ref OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/gstreamer-plugins-base?expand=0&rev=240 --- gstreamer-plugins-base.changes | 3 ++- gstreamer-plugins-base.spec | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/gstreamer-plugins-base.changes b/gstreamer-plugins-base.changes index 09b3244..a4ac308 100644 --- a/gstreamer-plugins-base.changes +++ b/gstreamer-plugins-base.changes @@ -22,7 +22,8 @@ Mon Dec 9 11:53:41 UTC 2024 - Bjørn Lie - meson: Don't use libdrm_dep in cc.has_header(). + oggstream: fix invalid ogg_packet->packet accesses, address invalid writes CVE (boo#1234456 CVE-2024-47615). - + opusdec: Set at most 64 channels to NONE position. + + opusdec: Set at most 64 channels to NONE position (boo#1234455 + CVE-2024-47607). + playbin: Fix caps leak in get_n_common_capsfeatures(). + playbin3: ERROR when setting new HLS URI with instant-uri=true. + sdp: Add debug categories for message and mikey modules. diff --git a/gstreamer-plugins-base.spec b/gstreamer-plugins-base.spec index 0400369..bd705d9 100644 --- a/gstreamer-plugins-base.spec +++ b/gstreamer-plugins-base.spec @@ -1,7 +1,7 @@ # # spec file for package gstreamer-plugins-base # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed