gstreamer-plugins-base-1.24.11-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025:14625-1 Final 1 1 2025-01-09T00:00:00Z current 2025-01-09T00:00:00Z 2025-01-09T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z gstreamer-plugins-base-1.24.11-1.1 on GA media These are all security issues fixed in the gstreamer-plugins-base-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2025-14625 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2024-47607/ SUSE CVE CVE-2024-47607 page openSUSE Tumbleweed gstreamer-plugins-base-1.24.11-1.1 gstreamer-plugins-base-32bit-1.24.11-1.1 gstreamer-plugins-base-devel-1.24.11-1.1 gstreamer-plugins-base-devel-32bit-1.24.11-1.1 gstreamer-plugins-base-lang-1.24.11-1.1 libgstallocators-1_0-0-1.24.11-1.1 libgstallocators-1_0-0-32bit-1.24.11-1.1 libgstapp-1_0-0-1.24.11-1.1 libgstapp-1_0-0-32bit-1.24.11-1.1 libgstaudio-1_0-0-1.24.11-1.1 libgstaudio-1_0-0-32bit-1.24.11-1.1 libgstfft-1_0-0-1.24.11-1.1 libgstfft-1_0-0-32bit-1.24.11-1.1 libgstgl-1_0-0-1.24.11-1.1 libgstgl-1_0-0-32bit-1.24.11-1.1 libgstpbutils-1_0-0-1.24.11-1.1 libgstpbutils-1_0-0-32bit-1.24.11-1.1 libgstriff-1_0-0-1.24.11-1.1 libgstriff-1_0-0-32bit-1.24.11-1.1 libgstrtp-1_0-0-1.24.11-1.1 libgstrtp-1_0-0-32bit-1.24.11-1.1 libgstrtsp-1_0-0-1.24.11-1.1 libgstrtsp-1_0-0-32bit-1.24.11-1.1 libgstsdp-1_0-0-1.24.11-1.1 libgstsdp-1_0-0-32bit-1.24.11-1.1 libgsttag-1_0-0-1.24.11-1.1 libgsttag-1_0-0-32bit-1.24.11-1.1 libgstvideo-1_0-0-1.24.11-1.1 libgstvideo-1_0-0-32bit-1.24.11-1.1 typelib-1_0-GstAllocators-1_0-1.24.11-1.1 typelib-1_0-GstApp-1_0-1.24.11-1.1 typelib-1_0-GstAudio-1_0-1.24.11-1.1 typelib-1_0-GstGL-1_0-1.24.11-1.1 typelib-1_0-GstGLEGL-1_0-1.24.11-1.1 typelib-1_0-GstGLWayland-1_0-1.24.11-1.1 typelib-1_0-GstGLX11-1_0-1.24.11-1.1 typelib-1_0-GstPbutils-1_0-1.24.11-1.1 typelib-1_0-GstRtp-1_0-1.24.11-1.1 typelib-1_0-GstRtsp-1_0-1.24.11-1.1 typelib-1_0-GstSdp-1_0-1.24.11-1.1 typelib-1_0-GstTag-1_0-1.24.11-1.1 typelib-1_0-GstVideo-1_0-1.24.11-1.1 gstreamer-plugins-base-1.24.11-1.1 as a component of openSUSE Tumbleweed gstreamer-plugins-base-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed gstreamer-plugins-base-devel-1.24.11-1.1 as a component of openSUSE Tumbleweed gstreamer-plugins-base-devel-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed gstreamer-plugins-base-lang-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstallocators-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstallocators-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstapp-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstapp-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstaudio-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstaudio-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstfft-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstfft-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstgl-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstgl-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstpbutils-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstpbutils-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstriff-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstriff-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstrtp-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstrtp-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstrtsp-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstrtsp-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstsdp-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstsdp-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgsttag-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgsttag-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstvideo-1_0-0-1.24.11-1.1 as a component of openSUSE Tumbleweed libgstvideo-1_0-0-32bit-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstAllocators-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstApp-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstAudio-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstGL-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstGLEGL-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstGLWayland-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstGLX11-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstPbutils-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstRtp-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstRtsp-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstSdp-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstTag-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed typelib-1_0-GstVideo-1_0-1.24.11-1.1 as a component of openSUSE Tumbleweed GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10. CVE-2024-47607 openSUSE Tumbleweed:gstreamer-plugins-base-1.24.11-1.1 openSUSE Tumbleweed:gstreamer-plugins-base-32bit-1.24.11-1.1 openSUSE Tumbleweed:gstreamer-plugins-base-devel-1.24.11-1.1 openSUSE Tumbleweed:gstreamer-plugins-base-devel-32bit-1.24.11-1.1 openSUSE Tumbleweed:gstreamer-plugins-base-lang-1.24.11-1.1 openSUSE Tumbleweed:libgstallocators-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstallocators-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstapp-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstapp-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstaudio-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstaudio-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstfft-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstfft-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstgl-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstgl-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstpbutils-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstpbutils-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstriff-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstriff-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstrtp-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstrtp-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstrtsp-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstrtsp-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstsdp-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstsdp-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgsttag-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgsttag-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:libgstvideo-1_0-0-1.24.11-1.1 openSUSE Tumbleweed:libgstvideo-1_0-0-32bit-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstAllocators-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstApp-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstAudio-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstGL-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstGLEGL-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstGLWayland-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstGLX11-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstPbutils-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstRtp-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstRtsp-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstSdp-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstTag-1_0-1.24.11-1.1 openSUSE Tumbleweed:typelib-1_0-GstVideo-1_0-1.24.11-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-47607.html CVE-2024-47607 https://bugzilla.suse.com/1234455 SUSE Bug 1234455