An update for gstreamer-plugins-good is now available for Red Hat EnterpriseLinux 7.Red Hat Product Security has rated this update as having a security impact ofModerate.

A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
GStreamer is a streaming media framework based on graphs of filters whichoperate on media data.

The gstreamer-plugins-good packages contain a collectionof well-supported plug-ins of good quality and under the LGPL license.Security Fix(es):* Multiple flaws were discovered in GStreamer’s FLC/FLI/FLX media file formatdecoding plug-in.

A remote attacker could use these flaws to cause anapplication using GStreamer to crash or, potentially, execute arbitrary codewith the privileges of the user running the application. (CVE-2016-9634,CVE-2016-9635, CVE-2016-9636, CVE-2016-9808)* An invalid memory read access flaw was found in GStreamer’s FLC/FLI/FLX mediafile format decoding plug-in.

A remote attacker could use this flaw to cause anapplication using GStreamer to crash. (CVE-2016-9807)Note: This update removes the vulnerable FLC/FLI/FLX plug-in.
Red Hat Enterprise Linux Desktop (v. 7)

SRPMS:
gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm
    MD5: 69ebab7fc28bb14eaa392e173099a59cSHA-256: b250430f345ad247f47e7f890efa023f69cd41a3b4f06360a2747691895dcefc
 
x86_64:
gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm
    MD5: cc1e2480a751fa437a2e72c039adfa73SHA-256: a94724197054e4da1be98ce7adf9607e6bae8f864f06c8ca06fdd0b1b2c540a5
gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm
    MD5: 40aec68c949a5983b31a25229752ebfbSHA-256: 842c382a2d0f9d1bbf6d1336890f545d9c5371d1b8586c53bcbcc8f3e31d0629
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.i686.rpm
    MD5: 187542aae0835a13f5e8a50f2e7d2934SHA-256: 85815221b238493f7eb316c532e2e5b4bc2e84488ec8e7a678cc8b137d57735c
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.x86_64.rpm
    MD5: e9c77a0717dcaf03c450cba0b73687dfSHA-256: 221b978d5b14b96f6e98c0d30e986cb64381c182c43873db982368eb9d1c861d
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
Red Hat Enterprise Linux HPC Node (v. 7)

SRPMS:
gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm
    MD5: 69ebab7fc28bb14eaa392e173099a59cSHA-256: b250430f345ad247f47e7f890efa023f69cd41a3b4f06360a2747691895dcefc
 
x86_64:
gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm
    MD5: cc1e2480a751fa437a2e72c039adfa73SHA-256: a94724197054e4da1be98ce7adf9607e6bae8f864f06c8ca06fdd0b1b2c540a5
gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm
    MD5: 40aec68c949a5983b31a25229752ebfbSHA-256: 842c382a2d0f9d1bbf6d1336890f545d9c5371d1b8586c53bcbcc8f3e31d0629
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.i686.rpm
    MD5: 187542aae0835a13f5e8a50f2e7d2934SHA-256: 85815221b238493f7eb316c532e2e5b4bc2e84488ec8e7a678cc8b137d57735c
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.x86_64.rpm
    MD5: e9c77a0717dcaf03c450cba0b73687dfSHA-256: 221b978d5b14b96f6e98c0d30e986cb64381c182c43873db982368eb9d1c861d
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
Red Hat Enterprise Linux Server (v. 7)

SRPMS:
gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm
    MD5: 69ebab7fc28bb14eaa392e173099a59cSHA-256: b250430f345ad247f47e7f890efa023f69cd41a3b4f06360a2747691895dcefc
 
PPC:
gstreamer-plugins-good-0.10.31-12.el7_3.ppc.rpm
    MD5: a54d8c07aa68db4123909efb8f0adcd8SHA-256: bcf19b0e5c53938a60e781aec9bf04a6f758375274ee847a48dedc46f008efb2
gstreamer-plugins-good-0.10.31-12.el7_3.ppc64.rpm
    MD5: 6d1998a82e8e81634828c5972713df20SHA-256: 3cbf7f6e1b515faccd2065eea38e62fa11904c5f6a454356dafdbb95b1cb80ab
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.ppc.rpm
    MD5: 9446db9a0960f56fa4607a5928fdc1a8SHA-256: a867472898559726247f91523d7d03297d82bbf5f9dcf34f584728d30069a761
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.ppc64.rpm
    MD5: 209a1410db52c7e44146ea8938e04752SHA-256: c76142834a68ac5468c8399d2cc2b6a274c5590f4d7b668d4ab0020413359264
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
PPC64LE:
gstreamer-plugins-good-0.10.31-12.el7_3.ppc64le.rpm
    MD5: b2e7d560f92415973057304994ccac2dSHA-256: f9a05261d7ab9e72ba083092f3d345baa7e292447cf415b4ea321e0f6a2229e4
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.ppc64le.rpm
    MD5: fa6b1c028f1cb37e101ee25e9aee7482SHA-256: 7d7d11072b109ae02a9e4d4f583594eb3b31892e1c9919efa1001d960e54f84e
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
s390x:
gstreamer-plugins-good-0.10.31-12.el7_3.s390.rpm
    MD5: e01fd217e995c5754ca06c67d6f78de9SHA-256: 81927bb8b365984494365a42d664a835405420c1f9a43ded0aa35b7dd6ced1a7
gstreamer-plugins-good-0.10.31-12.el7_3.s390x.rpm
    MD5: b0849fdcbd13f0d5883ef64f116557afSHA-256: 1259abfcfd92ddc33c4c601034d22d435b919b032b35248ebec97e5527b2c3f0
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.s390.rpm
    MD5: f4b12cff39da434fc112a5370167f256SHA-256: 2341157cb72669ee7841351694913b8c7540a671c23084feec9dde41bac894d5
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.s390x.rpm
    MD5: e73e2224b707e7a9abf1a893aec425b0SHA-256: 406b708518b67c4721c8a0e035df1c1f8420d997beebe3885ffa14dfbd9cf758
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
x86_64:
gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm
    MD5: cc1e2480a751fa437a2e72c039adfa73SHA-256: a94724197054e4da1be98ce7adf9607e6bae8f864f06c8ca06fdd0b1b2c540a5
gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm
    MD5: 40aec68c949a5983b31a25229752ebfbSHA-256: 842c382a2d0f9d1bbf6d1336890f545d9c5371d1b8586c53bcbcc8f3e31d0629
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.i686.rpm
    MD5: 187542aae0835a13f5e8a50f2e7d2934SHA-256: 85815221b238493f7eb316c532e2e5b4bc2e84488ec8e7a678cc8b137d57735c
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.x86_64.rpm
    MD5: e9c77a0717dcaf03c450cba0b73687dfSHA-256: 221b978d5b14b96f6e98c0d30e986cb64381c182c43873db982368eb9d1c861d
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
Red Hat Enterprise Linux Server TUS (v. 7.3)

SRPMS:
gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm
    MD5: 69ebab7fc28bb14eaa392e173099a59cSHA-256: b250430f345ad247f47e7f890efa023f69cd41a3b4f06360a2747691895dcefc
 
x86_64:
gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm
    MD5: cc1e2480a751fa437a2e72c039adfa73SHA-256: a94724197054e4da1be98ce7adf9607e6bae8f864f06c8ca06fdd0b1b2c540a5
gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm
    MD5: 40aec68c949a5983b31a25229752ebfbSHA-256: 842c382a2d0f9d1bbf6d1336890f545d9c5371d1b8586c53bcbcc8f3e31d0629
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.i686.rpm
    MD5: 187542aae0835a13f5e8a50f2e7d2934SHA-256: 85815221b238493f7eb316c532e2e5b4bc2e84488ec8e7a678cc8b137d57735c
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.x86_64.rpm
    MD5: e9c77a0717dcaf03c450cba0b73687dfSHA-256: 221b978d5b14b96f6e98c0d30e986cb64381c182c43873db982368eb9d1c861d
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
Red Hat Enterprise Linux Workstation (v. 7)

SRPMS:
gstreamer-plugins-good-0.10.31-12.el7_3.src.rpm
    MD5: 69ebab7fc28bb14eaa392e173099a59cSHA-256: b250430f345ad247f47e7f890efa023f69cd41a3b4f06360a2747691895dcefc
 
x86_64:
gstreamer-plugins-good-0.10.31-12.el7_3.i686.rpm
    MD5: cc1e2480a751fa437a2e72c039adfa73SHA-256: a94724197054e4da1be98ce7adf9607e6bae8f864f06c8ca06fdd0b1b2c540a5
gstreamer-plugins-good-0.10.31-12.el7_3.x86_64.rpm
    MD5: 40aec68c949a5983b31a25229752ebfbSHA-256: 842c382a2d0f9d1bbf6d1336890f545d9c5371d1b8586c53bcbcc8f3e31d0629
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.i686.rpm
    MD5: 187542aae0835a13f5e8a50f2e7d2934SHA-256: 85815221b238493f7eb316c532e2e5b4bc2e84488ec8e7a678cc8b137d57735c
gstreamer-plugins-good-debuginfo-0.10.31-12.el7_3.x86_64.rpm
    MD5: e9c77a0717dcaf03c450cba0b73687dfSHA-256: 221b978d5b14b96f6e98c0d30e986cb64381c182c43873db982368eb9d1c861d
gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3.noarch.rpm
    MD5: be2a5be3215f43f128c7f9631f5da707SHA-256: d21b88c1ec90dace27f42fbad4fb77f6574339f0874fe6cb061b014f5fabebde
 
(The unlinked packages above are only available from the Red Hat Network)

1397441 – CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder1401874 – CVE-2016-9807 gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:

Leave a Reply