Bug 13649

Summary: gstreamer1.0-plugins-bad security fixed
Product: [ROSA-based products] ROSA Fresh Reporter: Svyatoslav Matveev <s.matveev>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: critical    
Priority: High CC: a.proklov, m.novosyolov, pastordidi, v.potapov, y.tumanov
Version: AllFlags: v.potapov: qa_verified+
y.tumanov: secteam_verified+
a.proklov: published+
Target Milestone: 2021.1 Fresh R12   
Hardware: All   
OS: Linux   
URL: CVE-2023-40474, CVE-2023-40475, CVE-2023-40476, CVE-2023-5217
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Svyatoslav Matveev 2023-10-02 14:24:05 MSK 
********** QA ADVISORY **********

CVE-2023-40474, CVE-2023-40475 CVE-2023-40476
исправлены наложением патчей.

*** gstreamer1.0-plugins-bad
**  1.19.1 release +1

https://abf.io/build_lists/4751647
https://abf.io/build_lists/4751646
https://abf.io/build_lists/4751648
https://abf.io/build_lists/4751649
https://abf.io/build_lists/4751650
Comment 2 Dmitry Postnikov 2023-10-03 13:49:18 MSK 
***************************
The update sent to testings
Comment 3 Vladimir Potapov 2023-10-05 11:57:26 MSK 
gstreamer1.0-plugins-bad-1.19.1-4
https://abf.io/build_lists/4751647
https://abf.io/build_lists/4751646
https://abf.io/build_lists/4751648
https://abf.io/build_lists/4751649
https://abf.io/build_lists/4751650

libvpx-1.10.0-4
https://abf.io/build_lists/4751939
https://abf.io/build_lists/4751940
https://abf.io/build_lists/4751941
https://abf.io/build_lists/4751942
https://abf.io/build_lists/4751943
************************** Advisory ***********************
CVE-2023-40474, CVE-2023-40475 CVE-2023-40476 CVE-2023-5217 fix
***********************************************************
QA Verified
Comment 4 Yury 2023-10-19 16:01:11 MSK 
secteam_verified