Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 38: FEDORA-2023-0984b63b23 Critical: GStreamer Plugin Fix

fedora
Calendar Grey December 25, 2023
Dist Fedora Esm H88
Crucial patches released for mingw-gstreamer components in Fedora 38 addressing memory corruption issues. Stay updated!
Update to 1.22.7, fixes CVE-2023-37327, CVE-2023-37328, CVE-2023-37329.

Summary

GStreamer is a streaming media framework, based on graphs of filters which

operate on media data. Applications using this library can do anything

from real-time sound processing to playing videos, and just about anything

else media-related. Its plugin-based architecture means that new data

types or processing capabilities can be added simply by installing new

plugins.

GStreamer Good Plugins is a collection of well-supported plugins of

good quality and under the LGPL license.

Update Information:

Update to 1.22.7, fixes CVE-2023-37327, CVE-2023-37328, CVE-2023-37329.

Topics%20covered

Topics Covered

security advisory Fedora critical fix GStreamer plugin update heap overwrite

Change Log

* Wed Nov 15 2023 Sandro Mani - 1.22.7-1 - Update to 1.22.7 * Thu Sep 21 2023 Sandro Mani - 1.22.6-1 - Update to 1.22.6 * Sat Jul 29 2023 Sandro Mani - 1.22.5-1 - Update to 1.22.5 * Thu Jul 20 2023 Fedora Release Engineering - 1.22.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 4 2023 Sandro Mani - 1.22.4-1 - Update to 1.22.4 * Thu May 25 2023 Sandro Mani - 1.22.3-1 - Update to 1.22.3 * Sat Apr 15 2023 Sandro Mani - 1.22.2-1 - Update to 1.22.2 * Sun Mar 19 2023 Sandro Mani - 1.22.1-1 - Update to 1.22.1

References


[ 1 ] Bug #2254680 - CVE-2023-37327 mingw-gstreamer1-plugins-good: gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254680 [ 2 ] Bug #2254682 - CVE-2023-37328 mingw-gstreamer1-plugins-base: gstreamer-plugins-base: heap overwrite in subtitle parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254682 [ 3 ] Bug #2254684 - CVE-2023-37329 mingw-gstreamer1-plugins-bad-free: gstreamer-plugins-bad: heap overwrite in PGS subtitle overlay decoder [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254684

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-0984b63b23' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-gstreamer1-plugins-good
Product: Fedora 38
Version: 1.22.7
Release: 1.fc38
URL: https://gstreamer.freedesktop.org/
Summary: Cross compiled GStreamer1 plug-ins good

Topics%20covered

Topics Covered

security advisory Fedora critical fix GStreamer plugin update heap overwrite

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here