<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">gstreamer-plugins-bad-1.18.5-2.1 on GA media</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2024:10827-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2024-06-15T00:00:00Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2024-06-15T00:00:00Z</InitialReleaseDate>
    <CurrentReleaseDate>2024-06-15T00:00:00Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">gstreamer-plugins-bad-1.18.5-2.1 on GA media</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">These are all security issues fixed in the gstreamer-plugins-bad-1.18.5-2.1 package on the GA media of openSUSE Tumbleweed.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">openSUSE-Tumbleweed-2024-10827</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5838/</URL>
      <Description>SUSE CVE CVE-2017-5838 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5847/</URL>
      <Description>SUSE CVE CVE-2017-5847 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5848/</URL>
      <Description>SUSE CVE CVE-2017-5848 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE Tumbleweed">
      <Branch Type="Product Name" Name="openSUSE Tumbleweed">
        <FullProductName ProductID="openSUSE Tumbleweed" CPE="cpe:/o:opensuse:tumbleweed">openSUSE Tumbleweed</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-1.18.5-2.1">gstreamer-plugins-bad-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-32bit-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-32bit-1.18.5-2.1">gstreamer-plugins-bad-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-chromaprint-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-chromaprint-1.18.5-2.1">gstreamer-plugins-bad-chromaprint-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1">gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-devel-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-devel-1.18.5-2.1">gstreamer-plugins-bad-devel-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-fluidsynth-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-fluidsynth-1.18.5-2.1">gstreamer-plugins-bad-fluidsynth-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1">gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-plugins-bad-lang-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-plugins-bad-lang-1.18.5-2.1">gstreamer-plugins-bad-lang-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-transcoder-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-transcoder-1.18.5-2.1">gstreamer-transcoder-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gstreamer-transcoder-devel-1.18.5-2.1">
      <FullProductName ProductID="gstreamer-transcoder-devel-1.18.5-2.1">gstreamer-transcoder-devel-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstadaptivedemux-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstadaptivedemux-1_0-0-1.18.5-2.1">libgstadaptivedemux-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1">libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstbadaudio-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstbadaudio-1_0-0-1.18.5-2.1">libgstbadaudio-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstbadaudio-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstbadaudio-1_0-0-32bit-1.18.5-2.1">libgstbadaudio-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstbasecamerabinsrc-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstbasecamerabinsrc-1_0-0-1.18.5-2.1">libgstbasecamerabinsrc-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1">libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstcodecparsers-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstcodecparsers-1_0-0-1.18.5-2.1">libgstcodecparsers-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstcodecparsers-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstcodecparsers-1_0-0-32bit-1.18.5-2.1">libgstcodecparsers-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstcodecs-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstcodecs-1_0-0-1.18.5-2.1">libgstcodecs-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstcodecs-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstcodecs-1_0-0-32bit-1.18.5-2.1">libgstcodecs-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstinsertbin-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstinsertbin-1_0-0-1.18.5-2.1">libgstinsertbin-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstinsertbin-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstinsertbin-1_0-0-32bit-1.18.5-2.1">libgstinsertbin-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstisoff-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstisoff-1_0-0-1.18.5-2.1">libgstisoff-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstisoff-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstisoff-1_0-0-32bit-1.18.5-2.1">libgstisoff-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstmpegts-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstmpegts-1_0-0-1.18.5-2.1">libgstmpegts-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstmpegts-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstmpegts-1_0-0-32bit-1.18.5-2.1">libgstmpegts-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstphotography-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstphotography-1_0-0-1.18.5-2.1">libgstphotography-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstphotography-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstphotography-1_0-0-32bit-1.18.5-2.1">libgstphotography-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstplayer-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstplayer-1_0-0-1.18.5-2.1">libgstplayer-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstplayer-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstplayer-1_0-0-32bit-1.18.5-2.1">libgstplayer-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstsctp-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstsctp-1_0-0-1.18.5-2.1">libgstsctp-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstsctp-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstsctp-1_0-0-32bit-1.18.5-2.1">libgstsctp-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgsttranscoder-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgsttranscoder-1_0-0-1.18.5-2.1">libgsttranscoder-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgsturidownloader-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgsturidownloader-1_0-0-1.18.5-2.1">libgsturidownloader-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgsturidownloader-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgsturidownloader-1_0-0-32bit-1.18.5-2.1">libgsturidownloader-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstvulkan-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstvulkan-1_0-0-1.18.5-2.1">libgstvulkan-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstvulkan-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstvulkan-1_0-0-32bit-1.18.5-2.1">libgstvulkan-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstwayland-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstwayland-1_0-0-1.18.5-2.1">libgstwayland-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstwayland-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstwayland-1_0-0-32bit-1.18.5-2.1">libgstwayland-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstwebrtc-1_0-0-1.18.5-2.1">
      <FullProductName ProductID="libgstwebrtc-1_0-0-1.18.5-2.1">libgstwebrtc-1_0-0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgstwebrtc-1_0-0-32bit-1.18.5-2.1">
      <FullProductName ProductID="libgstwebrtc-1_0-0-32bit-1.18.5-2.1">libgstwebrtc-1_0-0-32bit-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstBadAudio-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstBadAudio-1_0-1.18.5-2.1">typelib-1_0-GstBadAudio-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstCodecs-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstCodecs-1_0-1.18.5-2.1">typelib-1_0-GstCodecs-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstInsertBin-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstInsertBin-1_0-1.18.5-2.1">typelib-1_0-GstInsertBin-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstMpegts-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstMpegts-1_0-1.18.5-2.1">typelib-1_0-GstMpegts-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstPlayer-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstPlayer-1_0-1.18.5-2.1">typelib-1_0-GstPlayer-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstTranscoder-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstTranscoder-1_0-1.18.5-2.1">typelib-1_0-GstTranscoder-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstVulkan-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstVulkan-1_0-1.18.5-2.1">typelib-1_0-GstVulkan-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1">typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1">typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-GstWebRTC-1_0-1.18.5-2.1">
      <FullProductName ProductID="typelib-1_0-GstWebRTC-1_0-1.18.5-2.1">typelib-1_0-GstWebRTC-1_0-1.18.5-2.1</FullProductName>
    </Branch>
    <Relationship ProductReference="gstreamer-plugins-bad-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-1.18.5-2.1">gstreamer-plugins-bad-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-32bit-1.18.5-2.1">gstreamer-plugins-bad-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-chromaprint-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-1.18.5-2.1">gstreamer-plugins-bad-chromaprint-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1">gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-devel-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-devel-1.18.5-2.1">gstreamer-plugins-bad-devel-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-fluidsynth-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-1.18.5-2.1">gstreamer-plugins-bad-fluidsynth-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1">gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-plugins-bad-lang-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-plugins-bad-lang-1.18.5-2.1">gstreamer-plugins-bad-lang-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-transcoder-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-transcoder-1.18.5-2.1">gstreamer-transcoder-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="gstreamer-transcoder-devel-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:gstreamer-transcoder-devel-1.18.5-2.1">gstreamer-transcoder-devel-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstadaptivedemux-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-1.18.5-2.1">libgstadaptivedemux-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1">libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstbadaudio-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstbadaudio-1_0-0-1.18.5-2.1">libgstbadaudio-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstbadaudio-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstbadaudio-1_0-0-32bit-1.18.5-2.1">libgstbadaudio-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstbasecamerabinsrc-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-1.18.5-2.1">libgstbasecamerabinsrc-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1">libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstcodecparsers-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstcodecparsers-1_0-0-1.18.5-2.1">libgstcodecparsers-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstcodecparsers-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstcodecparsers-1_0-0-32bit-1.18.5-2.1">libgstcodecparsers-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstcodecs-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstcodecs-1_0-0-1.18.5-2.1">libgstcodecs-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstcodecs-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstcodecs-1_0-0-32bit-1.18.5-2.1">libgstcodecs-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstinsertbin-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstinsertbin-1_0-0-1.18.5-2.1">libgstinsertbin-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstinsertbin-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstinsertbin-1_0-0-32bit-1.18.5-2.1">libgstinsertbin-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstisoff-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstisoff-1_0-0-1.18.5-2.1">libgstisoff-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstisoff-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstisoff-1_0-0-32bit-1.18.5-2.1">libgstisoff-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstmpegts-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstmpegts-1_0-0-1.18.5-2.1">libgstmpegts-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstmpegts-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstmpegts-1_0-0-32bit-1.18.5-2.1">libgstmpegts-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstphotography-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstphotography-1_0-0-1.18.5-2.1">libgstphotography-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstphotography-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstphotography-1_0-0-32bit-1.18.5-2.1">libgstphotography-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstplayer-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstplayer-1_0-0-1.18.5-2.1">libgstplayer-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstplayer-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstplayer-1_0-0-32bit-1.18.5-2.1">libgstplayer-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstsctp-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstsctp-1_0-0-1.18.5-2.1">libgstsctp-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstsctp-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstsctp-1_0-0-32bit-1.18.5-2.1">libgstsctp-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgsttranscoder-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgsttranscoder-1_0-0-1.18.5-2.1">libgsttranscoder-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgsturidownloader-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgsturidownloader-1_0-0-1.18.5-2.1">libgsturidownloader-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgsturidownloader-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgsturidownloader-1_0-0-32bit-1.18.5-2.1">libgsturidownloader-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstvulkan-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstvulkan-1_0-0-1.18.5-2.1">libgstvulkan-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstvulkan-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstvulkan-1_0-0-32bit-1.18.5-2.1">libgstvulkan-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstwayland-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstwayland-1_0-0-1.18.5-2.1">libgstwayland-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstwayland-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstwayland-1_0-0-32bit-1.18.5-2.1">libgstwayland-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstwebrtc-1_0-0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstwebrtc-1_0-0-1.18.5-2.1">libgstwebrtc-1_0-0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgstwebrtc-1_0-0-32bit-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:libgstwebrtc-1_0-0-32bit-1.18.5-2.1">libgstwebrtc-1_0-0-32bit-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstBadAudio-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstBadAudio-1_0-1.18.5-2.1">typelib-1_0-GstBadAudio-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstCodecs-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstCodecs-1_0-1.18.5-2.1">typelib-1_0-GstCodecs-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstInsertBin-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstInsertBin-1_0-1.18.5-2.1">typelib-1_0-GstInsertBin-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstMpegts-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstMpegts-1_0-1.18.5-2.1">typelib-1_0-GstMpegts-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstPlayer-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstPlayer-1_0-1.18.5-2.1">typelib-1_0-GstPlayer-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstTranscoder-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstTranscoder-1_0-1.18.5-2.1">typelib-1_0-GstTranscoder-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstVulkan-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstVulkan-1_0-1.18.5-2.1">typelib-1_0-GstVulkan-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1">typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1">typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-GstWebRTC-1_0-1.18.5-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:typelib-1_0-GstWebRTC-1_0-1.18.5-2.1">typelib-1_0-GstWebRTC-1_0-1.18.5-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.</Note>
    </Notes>
    <CVE>CVE-2017-5838</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-lang-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsttranscoder-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstBadAudio-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstCodecs-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstInsertBin-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstMpegts-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstPlayer-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstTranscoder-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkan-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstWebRTC-1_0-1.18.5-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
      <ScoreSet>
        <BaseScore>5</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL/>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5838.html</URL>
        <Description>CVE-2017-5838</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1023259</URL>
        <Description>SUSE Bug 1023259</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1024051</URL>
        <Description>SUSE Bug 1024051</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors.</Note>
    </Notes>
    <CVE>CVE-2017-5847</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-lang-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsttranscoder-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstBadAudio-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstCodecs-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstInsertBin-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstMpegts-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstPlayer-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstTranscoder-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkan-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstWebRTC-1_0-1.18.5-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>5</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL/>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5847.html</URL>
        <Description>CVE-2017-5847</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1023259</URL>
        <Description>SUSE Bug 1023259</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.</Note>
    </Notes>
    <CVE>CVE-2017-5848</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-chromaprint-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-fluidsynth-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-plugins-bad-lang-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:gstreamer-transcoder-devel-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstadaptivedemux-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbadaudio-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstbasecamerabinsrc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecparsers-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstcodecs-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstinsertbin-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstisoff-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstmpegts-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstphotography-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstplayer-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstsctp-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsttranscoder-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgsturidownloader-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstvulkan-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwayland-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:libgstwebrtc-1_0-0-32bit-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstBadAudio-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstCodecs-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstInsertBin-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstMpegts-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstPlayer-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstTranscoder-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkan-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanWayland-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstVulkanXCB-1_0-1.18.5-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:typelib-1_0-GstWebRTC-1_0-1.18.5-2.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
      <ScoreSet>
        <BaseScore>5</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL/>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5848.html</URL>
        <Description>CVE-2017-5848</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1023259</URL>
        <Description>SUSE Bug 1023259</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1024068</URL>
        <Description>SUSE Bug 1024068</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
