Most recent entries from all

ALSA-2023:2260 — Moderate: gstreamer1-plugins-good security update

Affected: AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-06453

EUVD-2026-12155

fkie_cve-2022-2122

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.

GHSA-qc68-fgqr-q53f

gsd-2022-2122

OESA-2022-1736 — gstreamer1-plugins-good security update

Affected: openEuler:20.03-LTS-SP1: gstreamer1-plugins-good, openEuler:20.03-LTS-SP3: gstreamer1-plugins-good, openEuler:22.03-LTS: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): Potential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920) Potential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122) Heap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)

openSUSE-SU-2024:12709-1 — gstreamer-plugins-good-1.22.0-2.1 on GA media

gstreamer-plugins-good-1.22.0-2.1 on GA media

SUSE-SU-2022:2911-1 — Security update for gstreamer-plugins-good

Security update for gstreamer-plugins-good

UBUNTU-CVE-2022-2122

Affected: Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:18.04:LTS: gst-plugins-good1.0, Ubuntu:18.04:LTS: openjfx, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: openjfx, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: openjfx, Ubuntu:24.04:LTS: openjfx, Ubuntu:25.10: openjfx, Ubuntu:26.04:LTS: openjfx

WID-SEC-W-2023-0561 — Xerox FreeFlow Print Server: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.