SUSE-CU-2025:5297-1: Security update of suse/kiosk/pulseaudio

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/kiosk/pulseaudio
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:5297-1
Container Tags        : suse/kiosk/pulseaudio:17 , suse/kiosk/pulseaudio:17.0 , suse/kiosk/pulseaudio:17.0-61.20 , suse/kiosk/pulseaudio:latest
Container Release     : 61.20
Severity              : moderate
Type                  : security
References            : 1244403 1244404 1244407 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808
-----------------------------------------------------------------

The container suse/kiosk/pulseaudio was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:2302-1
Released:    Mon Jul 14 12:50:21 2025
Summary:     Security update for gstreamer-plugins-base
Type:        security
Severity:    moderate
References:  1244403,1244404,1244407,CVE-2025-47806,CVE-2025-47807,CVE-2025-47808
This update for gstreamer-plugins-base fixes the following issues:

- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).


The following package changes have been done:

- gstreamer-plugins-base-1.24.0-150600.3.11.1 updated
- libgsttag-1_0-0-1.24.0-150600.3.11.1 updated
- libgstaudio-1_0-0-1.24.0-150600.3.11.1 updated
- libgstvideo-1_0-0-1.24.0-150600.3.11.1 updated
- libgstallocators-1_0-0-1.24.0-150600.3.11.1 updated
- libgstgl-1_0-0-1.24.0-150600.3.11.1 updated
- libgstapp-1_0-0-1.24.0-150600.3.11.1 updated
- libgstpbutils-1_0-0-1.24.0-150600.3.11.1 updated
- libgstriff-1_0-0-1.24.0-150600.3.11.1 updated