Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 39: 2024-919bc7e512 Critical GStreamer AV1 Buffer Overflow Fix

fedora
Calendar Grey July 1, 2024
Dist Fedora Esm H88
Security notice for Fedora 39: AV1 parsing buffer overflow vulnerability identified in gstreamer-1.22.9. Users are advised to upgrade immediately.
Update to gstreamer-1.22.9

Summary

GStreamer is a streaming media framework, based on graphs of elements which

operate on media data.

This package contains plug-ins that aren't tested

well enough, or the code is not of good enough quality.

Update Information:

Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora GStreamer AV1

Change Log

* Sat Jan 27 2024 Sandro Mani - 1.22.9-1 - Update to 1.22.9 * Thu Jan 25 2024 Fedora Release Engineering - 1.22.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.22.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Dec 20 2023 Sandro Mani - 1.22.8-1 - Update to 1.22.8

References


[ 1 ] Bug #2283001 - CVE-2024-4453 mingw-gstreamer1: gstreamer: EXIF Metadata Parsing Integer Overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2283001 [ 2 ] Bug #2292337 - CVE-2024-0444 mingw-gstreamer1: gstreamer: AV1 Video Parsing Stack-based Buffer Overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292337

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-919bc7e512' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-gstreamer1-plugins-bad-free
Product: Fedora 39
Version: 1.22.9
Release: 1.fc39
URL: http://gstreamer.freedesktop.org/
Summary: Cross compiled GStreamer1 plug-ins "bad"

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora GStreamer AV1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here