Red Hat RHSA-2016:2975 GStreamer FLC/FLI/FLX Decoding Vulnerabilities Fix

Critical Vulnerability Information Vulnerability ID RHSA-2016:2975 Vulnerability Description Multiple vulnerabilities were discovered in the GStreamer FLC/FLI/FLX media file format decoder plugin. Remote attackers could exploit these vulnerabilities to cause application crashes or potentially execute arbitrary code with the privileges of the user running the application. (CVE-2016-9634, CVE-2016-9635, CVE-2016-9636, CVE-2016-9808) An invalid memory read access vulnerability was found in the GStreamer FLC/FLI/FLX media file format decoder plugin. Remote attackers could exploit this vulnerability to cause application crashes. (CVE-2016-9807) Affected Products Red Hat Enterprise Linux Server 6 x86_64 Red Hat Enterprise Linux Server 6 i386 Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386 Red Hat Enterprise Linux Workstation 6 x86_64 Red Hat Enterprise Linux Workstation 6 i386 Red Hat Enterprise Linux Desktop 6 x86_64 Red Hat Enterprise Linux Desktop 6 i386 Red Hat Enterprise Linux for IBM z Systems 6 s390x Red Hat Enterprise Linux for Power, big endian 6 ppc64 Red Hat Enterprise Linux for Scientific Computing 6 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386 Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x CVE IDs CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 Solution For detailed information on how to apply this update, please refer to: https://access.redhat.com/articles/11258 Release Date Released: 2016-12-21 Updated: 2016-12-21

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHSA-2016:2975 GStreamer FLC/FLI/FLX Decoding Vulnerabilities Fix