Most recent entries from all

ALSA-2022:7618 — Moderate: gstreamer1-plugins-good security update

Affected: AlmaLinux:8: gstreamer1-plugins-good, AlmaLinux:8: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Use-after-free in matroska demuxing (CVE-2021-3497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-02647

Withdrawn: BELL-CVE-2021-3497 — CVE-2021-3497 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2021-31668

EUVD-2026-20902

fkie_cve-2021-3497

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

GHSA-9gpj-v2gq-r9fx

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

gsd-2021-3497

OESA-2021-1322 — gstreamer1-plugins-good security update

Affected: openEuler:20.03-LTS-SP1: gstreamer1-plugins-good, openEuler:20.03-LTS-SP2: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es):

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.(CVE-2021-3497) GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.(CVE-2021-3498)

openSUSE-SU-2021:1230-1 — Security update for gstreamer-plugins-good

Security update for gstreamer-plugins-good

SUSE-SU-2021:2915-1 — Security update for gstreamer-plugins-good

Security update for gstreamer-plugins-good

UBUNTU-CVE-2021-3497

Affected: Ubuntu:16.04:LTS: gst-plugins-good1.0, Ubuntu:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

WID-SEC-W-2022-1105 — GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.