Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 509
Alerts This Week
Warning Icon 1 509

Fedora 24 GStreamer Update: Critical Heap Overflow in Decoder

fedora
Calendar Grey December 6, 2016
Scroller Fedora Esm H88
Update for FLIC decoder in GStreamer resolved in Fedora 24 announcement, boosting security and system efficiency.
Add fix for gstreamer FLIC decoder vulnerability

Summary

GStreamer is a streaming media framework, based on graphs of filters which

operate on media data. Applications using this library can do anything

from real-time sound processing to playing videos, and just about anything

else media-related. Its plugin-based architecture means that new data

types or processing capabilities can be added simply by installing new

plugins.

GStreamer Good Plugins is a collection of well-supported plugins of

good quality and under the LGPL license.

Update Information:

Add fix for gstreamer FLIC decoder vulnerability

Topics%20covered

Topics Covered

security advisory fedora heap overflow media framework gstreamer plugin update decoder fix

Change Log

References


[ 1 ] Bug #1397441 - CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9808 gstreamer-plugins-good: Heap buffer overflow in FLIC decoder https://bugzilla.redhat.com/show_bug.cgi?id=1397441

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade gstreamer1-plugins-good' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gstreamer1-plugins-good
Product: Fedora 24
Version: 1.8.3
Release: 2.fc24
URL: https://gstreamer.freedesktop.org/
Summary: GStreamer plugins with good code and licensing

Topics%20covered

Topics Covered

security advisory fedora heap overflow media framework gstreamer plugin update decoder fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.