ELA-486-1 gst-plugins-bad0.10 security update

buffer overflow

Related CVEs CVE-2021-3185

Andrew Wesie discovered a buffer overflow in the H264 support of the GStreamer multimedia framework, which could potentially result in the execution of arbitrary code.

For Debian 8 jessie, these problems have been fixed in version 0.10.23-7.4+deb8u5.

We recommend that you upgrade your gst-plugins-bad0.10 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.