Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Fedora 39: FEDORA-2023-7b5dcd5e22 Severe Stack Overflow

fedora
Calendar Grey November 19, 2023
Dist Fedora Esm H88
Important Fedora patch for gstreamer1-plugins-good version 1.22.7 addresses existing problems linked to multimedia handling.
1.22.7

Summary

GStreamer is a streaming media framework, based on graphs of filters which

operate on media data. Applications using this library can do anything

from real-time sound processing to playing videos, and just about anything

else media-related. Its plugin-based architecture means that new data

types or processing capabilities can be added simply by installing new

plugins.

GStreamer Good Plugins is a collection of well-supported plugins of

good quality and under the LGPL license.

Update Information:

1.22.7

Topics%20covered

Topics Covered

security advisory buffer overflow critical software update Fedora gstreamer media processing

Change Log

* Tue Nov 14 2023 Gwyn Ciesla - 1.22.7-1 - 1.22.7 * Fri Oct 13 2023 Jan Grulich - 1.22.5-3 - Rebuild (qt6) * Thu Oct 5 2023 Jan Grulich - 1.22.5-2 - Rebuild (qt6)

References


[ 1 ] Bug #2250248 - CVE-2023-44429 gstreamer1-plugins-bad-free: gstreamer: AV1 codec parser buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250248 [ 2 ] Bug #2250250 - CVE-2023-44446 gstreamer1-plugins-bad-free: gstreamer: MXF demuxer use-after-free vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250250

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-6a4aea6d13' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gstreamer1-plugins-good
Product: Fedora 39
Version: 1.22.7
Release: 1.fc39
URL: https://gstreamer.freedesktop.org/
Summary: GStreamer plugins with good code and licensing

Topics%20covered

Topics Covered

security advisory buffer overflow critical software update Fedora gstreamer media processing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here