[ MDVSA-2009:035 ] gstreamer0.10-plugins-good
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2009:035
http://www.mandriva.com/security/
_______________________________________________________________________
Package : gstreamer0.10-plugins-good
Date : February 10, 2009
Affected: 2008.0, 2008.1, 2009.0
_______________________________________________________________________
Problem Description:
Security vulnerabilities have been discovered and corrected in
gstreamer0.10-plugins-good, might allow remote attackers to execute
arbitrary code via a malformed QuickTime media file (CVE-2009-0386,
CVE-2009-0387, CVE-2009-0397).
The updated packages have been patched to prevent this.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0386
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0397
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.0:
72a2a267f064b3557c0e7da869187920
2008.0/i586/gstreamer0.10-aalib-0.10.6-3.2mdv2008.0.i586.rpm
fe8a04fcd9240eaa887fa5d1147c86e9
2008.0/i586/gstreamer0.10-caca-0.10.6-3.2mdv2008.0.i586.rpm
639e4701b8431b8fff2df2d196ce3b6c
2008.0/i586/gstreamer0.10-dv-0.10.6-3.2mdv2008.0.i586.rpm
c2a123762a863578a24d7ea82ab693cd
2008.0/i586/gstreamer0.10-esound-0.10.6-3.2mdv2008.0.i586.rpm
8fe61dd52cd465ae43beb7e1ba311ce4
2008.0/i586/gstreamer0.10-flac-0.10.6-3.2mdv2008.0.i586.rpm
a80a7ef4f5ac1d7280f4290d2c770485
2008.0/i586/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.i586.rpm
97152f5ecea0a2c23b349191794f2700
2008.0/i586/gstreamer0.10-raw1394-0.10.6-3.2mdv2008.0.i586.rpm
18ad6400d673b07d8f8037177873e144
2008.0/i586/gstreamer0.10-speex-0.10.6-3.2mdv2008.0.i586.rpm
935441a9449d351bf3e0a6bfee3ac64a
2008.0/i586/gstreamer0.10-wavpack-0.10.6-3.2mdv2008.0.i586.rpm
f8e312ce8de8ac8d6d6e2bbfcdaf93aa
2008.0/SRPMS/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
a140386b0f5b582d8e64cc5584f86fde
2008.0/x86_64/gstreamer0.10-aalib-0.10.6-3.2mdv2008.0.x86_64.rpm
5eb03a60b115cec41d78478b92586537
2008.0/x86_64/gstreamer0.10-caca-0.10.6-3.2mdv2008.0.x86_64.rpm
564d6a79a523ad54d7f70c02a298bba1
2008.0/x86_64/gstreamer0.10-dv-0.10.6-3.2mdv2008.0.x86_64.rpm
9cfbae1621e6e002f764e780194d0376
2008.0/x86_64/gstreamer0.10-esound-0.10.6-3.2mdv2008.0.x86_64.rpm
a8e034c1ec0bcfb2c3048269940340ed
2008.0/x86_64/gstreamer0.10-flac-0.10.6-3.2mdv2008.0.x86_64.rpm
d14231b2f55e4c9959b765d091e7bafd
2008.0/x86_64/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.x86_64.rpm
312e887d320ae3c36597f3a2085f64e5
2008.0/x86_64/gstreamer0.10-raw1394-0.10.6-3.2mdv2008.0.x86_64.rpm
f4ab3bc506034b9d2e4e64fded34b026
2008.0/x86_64/gstreamer0.10-speex-0.10.6-3.2mdv2008.0.x86_64.rpm
4f9fc5a9aadc3350c32fe95bb4824c82
2008.0/x86_64/gstreamer0.10-wavpack-0.10.6-3.2mdv2008.0.x86_64.rpm
f8e312ce8de8ac8d6d6e2bbfcdaf93aa
2008.0/SRPMS/gstreamer0.10-plugins-good-0.10.6-3.2mdv2008.0.src.rpm
Mandriva Linux 2008.1:
37ee72c4dd8c4d1d65b21d5f7c4174cf
2008.1/i586/gstreamer0.10-aalib-0.10.7-3.2mdv2008.1.i586.rpm
94bc8fbbd6b27f76172be895762a7d22
2008.1/i586/gstreamer0.10-caca-0.10.7-3.2mdv2008.1.i586.rpm
4822f9a52e11966aa1a3b82e8636eafb
2008.1/i586/gstreamer0.10-dv-0.10.7-3.2mdv2008.1.i586.rpm
ed36bf5b66d719c449de031c3973fbf5
2008.1/i586/gstreamer0.10-esound-0.10.7-3.2mdv2008.1.i586.rpm
81bd4565763e2d857d05875fdc299d99
2008.1/i586/gstreamer0.10-flac-0.10.7-3.2mdv2008.1.i586.rpm
fe7dd742de6d0510c337c743fe6da912
2008.1/i586/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.i586.rpm
86f44f42f73a2eb0dea5dc83b11fa4cf
2008.1/i586/gstreamer0.10-raw1394-0.10.7-3.2mdv2008.1.i586.rpm
831da1ff4308a0328280992f62137932
2008.1/i586/gstreamer0.10-speex-0.10.7-3.2mdv2008.1.i586.rpm
6e7590f10fcc99ae46a7e4970df836de
2008.1/i586/gstreamer0.10-wavpack-0.10.7-3.2mdv2008.1.i586.rpm
f18f7ec53b3b8653e449c1aeecb31138
2008.1/SRPMS/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.src.rpm
Mandriva Linux 2008.1/X86_64:
e25059da03c9110f482e2fbf93fd8933
2008.1/x86_64/gstreamer0.10-aalib-0.10.7-3.2mdv2008.1.x86_64.rpm
0dcb67eb17fa5b2268b7dd37233fb261
2008.1/x86_64/gstreamer0.10-caca-0.10.7-3.2mdv2008.1.x86_64.rpm
2efe3887ed7e82ebe16843b083295db6
2008.1/x86_64/gstreamer0.10-dv-0.10.7-3.2mdv2008.1.x86_64.rpm
1f59d9b91fb95b8b88671fd971ef3be2
2008.1/x86_64/gstreamer0.10-esound-0.10.7-3.2mdv2008.1.x86_64.rpm
192b9d4522516d89ebe0b29dfe80107b
2008.1/x86_64/gstreamer0.10-flac-0.10.7-3.2mdv2008.1.x86_64.rpm
0c7510e8bbaf11a984b5d43993fd6606
2008.1/x86_64/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.x86_64.rpm
e78b8da20599d9b3557f3c2d7b3d64a0
2008.1/x86_64/gstreamer0.10-raw1394-0.10.7-3.2mdv2008.1.x86_64.rpm
b2cadc38e7054fa29b2c39341b14c8f8
2008.1/x86_64/gstreamer0.10-speex-0.10.7-3.2mdv2008.1.x86_64.rpm
6f70bd674d5c66af13910a768618dd2b
2008.1/x86_64/gstreamer0.10-wavpack-0.10.7-3.2mdv2008.1.x86_64.rpm
f18f7ec53b3b8653e449c1aeecb31138
2008.1/SRPMS/gstreamer0.10-plugins-good-0.10.7-3.2mdv2008.1.src.rpm
Mandriva Linux 2009.0:
fd0c54e1c7e9e89fee53b87afc6218e8
2009.0/i586/gstreamer0.10-aalib-0.10.10-2.1mdv2009.0.i586.rpm
1e22dfe9f0a620be5d1842ce6651c416
2009.0/i586/gstreamer0.10-caca-0.10.10-2.1mdv2009.0.i586.rpm
065cc2305d32afec3475f3f0e687a81b
2009.0/i586/gstreamer0.10-dv-0.10.10-2.1mdv2009.0.i586.rpm
7d4158cbead8c2f257327fa947183889
2009.0/i586/gstreamer0.10-esound-0.10.10-2.1mdv2009.0.i586.rpm
c12d76e19388a0bc96723252a6882a45
2009.0/i586/gstreamer0.10-flac-0.10.10-2.1mdv2009.0.i586.rpm
5bd137ba566a3fbe0f7a58a293046923
2009.0/i586/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.i586.rpm
2d8ffce05f943cde7237117e51816dc9
2009.0/i586/gstreamer0.10-pulse-0.10.10-2.1mdv2009.0.i586.rpm
5546602310d369d1d9b784e9a4f47577
2009.0/i586/gstreamer0.10-raw1394-0.10.10-2.1mdv2009.0.i586.rpm
fc4922a6c70a5c611647c5ec2f1ae9e7
2009.0/i586/gstreamer0.10-soup-0.10.10-2.1mdv2009.0.i586.rpm
d42916979b54613c3be7591ade5da727
2009.0/i586/gstreamer0.10-speex-0.10.10-2.1mdv2009.0.i586.rpm
c2581f15e3439fe5dbd7096541ad46e8
2009.0/i586/gstreamer0.10-wavpack-0.10.10-2.1mdv2009.0.i586.rpm
08723d4a2eaa0f5d564a34ae120d8390
2009.0/SRPMS/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.src.rpm
Mandriva Linux 2009.0/X86_64:
618b0f23135de1db4cc3a55f6c32973c
2009.0/x86_64/gstreamer0.10-aalib-0.10.10-2.1mdv2009.0.x86_64.rpm
4fe0b93bb062c565b1bc1eb63d5d5642
2009.0/x86_64/gstreamer0.10-caca-0.10.10-2.1mdv2009.0.x86_64.rpm
3b2b4a8704411fad70e9156dbad3ed4a
2009.0/x86_64/gstreamer0.10-dv-0.10.10-2.1mdv2009.0.x86_64.rpm
860a46cac6e60a0d9a543c8e89f46584
2009.0/x86_64/gstreamer0.10-esound-0.10.10-2.1mdv2009.0.x86_64.rpm
52bd426b3821c4d844999f5e3bfa77d9
2009.0/x86_64/gstreamer0.10-flac-0.10.10-2.1mdv2009.0.x86_64.rpm
0f52a696ac6afdf0d8265872d1748a2a
2009.0/x86_64/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.x86_64.rpm
5fb651ebf99b93fb346f734e9ca5cbfe
2009.0/x86_64/gstreamer0.10-pulse-0.10.10-2.1mdv2009.0.x86_64.rpm
5f7e0823e61559dd0037a14328b13925
2009.0/x86_64/gstreamer0.10-raw1394-0.10.10-2.1mdv2009.0.x86_64.rpm
ee78e14a1831e667338b486de297b4b1
2009.0/x86_64/gstreamer0.10-soup-0.10.10-2.1mdv2009.0.x86_64.rpm
1678a544c7651cd119d2746e9c3949a1
2009.0/x86_64/gstreamer0.10-speex-0.10.10-2.1mdv2009.0.x86_64.rpm
31ec957603b4a0deb044ec2f7c427cb0
2009.0/x86_64/gstreamer0.10-wavpack-0.10.10-2.1mdv2009.0.x86_64.rpm
08723d4a2eaa0f5d564a34ae120d8390
2009.0/SRPMS/gstreamer0.10-plugins-good-0.10.10-2.1mdv2009.0.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJkiTqmqjQ0CJFipgRAgeoAKC1/4cDJT4jWm2bK3kdszfNjmGpmQCePJB4
49QMXQEqfHKT5vJgPag1/5s=
=ITtm
-----END PGP SIGNATURE-----