Affected: AlmaLinux:9: gstreamer1-plugins-base, AlmaLinux:9: gstreamer1-plugins-base-devel, AlmaLinux:9: gstreamer1-plugins-base-tools

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

* gstreamer1-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference (CVE-2024-47542) * gstreamer1-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser (CVE-2024-47541) * gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask (CVE-2024-47600) * gstreamer1-plugins-base: NULL-pointer dereference in LRC subtitle parser (CVE-2024-47835)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

Affected: Alpaquita:23: gst-plugins-base, Alpaquita:stream: gst-plugins-base

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the function gst_discoverer_audio_info_get_channels may return a guint channels value greater than 64. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an index greater than 63 is used. This vulnerability can result in reading unintended bytes from the stack. Additionally, the dereference of value->value_nick after the OOB-read can lead to further memory corruption or undefined behavior. This vulnerability is fixed in 1.24.10.

Affected: openEuler:24.03-LTS: gstreamer1-plugins-base, openEuler:22.03-LTS-SP4: gstreamer1-plugins-base, openEuler:22.03-LTS-SP3: gstreamer1-plugins-base, openEuler:20.03-LTS-SP4: gstreamer1-plugins-base, openEuler:22.03-LTS-SP1: gstreamer1-plugins-base

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fix(es): (CVE-2024-47538) (CVE-2024-47541) (CVE-2024-47542) (CVE-2024-47600) (CVE-2024-47607) (CVE-2024-47615) (CVE-2024-47835)

gstreamer-plugins-base-1.24.10-2.1 on GA media

Security update for gstreamer-plugins-base

Affected: Ubuntu:16.04:LTS: gst-plugins-base0.10, Ubuntu:Pro:18.04:LTS: gst-plugins-base1.0, Ubuntu:20.04:LTS: gst-plugins-base1.0, Ubuntu:22.04:LTS: gst-plugins-base1.0, Ubuntu:24.04:LTS: gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the function gst_discoverer_audio_info_get_channels may return a guint channels value greater than 64. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an index greater than 63 is used. This vulnerability can result in reading unintended bytes from the stack. Additionally, the dereference of value->value_nick after the OOB-read can lead to further memory corruption or undefined behavior. This vulnerability is fixed in 1.24.10.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.