UbuntuUpdates.org

Package "gstreamer1.0-pulseaudio"

Name: gstreamer1.0-pulseaudio

Description:

GStreamer plugin for PulseAudio (transitional package)
Latest version: 1.20.3-0ubuntu1.7
Release: jammy (22.04)
Level: updates
Repository: main
Head package: gst-plugins-good1.0
Homepage: https://gstreamer.freedesktop.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gstreamer1.0-pulseaudio"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gstreamer1.0-pulseaudio" in Jammy

Repository Area Version
base main 1.20.1-1ubuntu1
security main 1.20.3-0ubuntu1.7

Changelog

Version: 1.20.3-0ubuntu1.7 2026-07-22 20:07:48 UTC
No changelog available yet.
Source diff to previous version

Version: 1.20.3-0ubuntu1.6 2026-05-27 16:07:30 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.6) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS when parsing MP4 audio tracks
    - debian/patches/CVE-2026-464xx.patch: qtdemux: Avoid division by zero if
      0 audio channels are signalled in gst/isomp4/qtdemux.c.
    - CVE-2026-46469
    - CVE-2026-46470

 -- Marc Deslauriers <email address hidden> Sun, 24 May 2026 14:23:18 -0400
Source diff to previous version
CVE-2026-46469 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function d
CVE-2026-46470 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function d

Version: 1.20.3-0ubuntu1.5 2026-03-30 21:08:11 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.5) jammy-security; urgency=medium

  * SECURITY UPDATE: multiple rtpqdm2depay code execution issues
    - debian/patches/CVE-2026-3083_5.patch: remove rtpqdm2depay element in
      docs/gst_plugins_cache.json, gst/rtp/gstrtp.c, gst/rtp/meson.build,
      gst/rtp/gstrtpqdmdepay.c, gst/rtp/gstrtpqdmdepay.h.
    - CVE-2026-3083
    - CVE-2026-3085

 -- Marc Deslauriers <email address hidden> Fri, 27 Mar 2026 13:08:07 -0400
Source diff to previous version
CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code
CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar

Version: 1.20.3-0ubuntu1.4 2025-08-26 19:07:05 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47183.patch: use byte reader to parse mvhd
      box in gst/isomp4/qtdemux.c.
    - CVE-2025-47183
  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47219.patch: check if enough bytes are
      available for each stsd entry in gst/isomp4/qtdemux.c.
    - CVE-2025-47219

 -- Marc Deslauriers <email address hidden> Mon, 25 Aug 2025 10:29:08 -0400
Source diff to previous version
CVE-2025-47183 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leadin
CVE-2025-47219 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possib

Version: 1.20.3-0ubuntu1.3 2024-12-18 17:07:10 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/202412-sec*.patch: backport upstream security fix
      commits from 1.24.10.
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47543,
      CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596,
      CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601,
      CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613,
      CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777,
      CVE-2024-47778, CVE-2024-47834
  * debian/Skip-failing-tests.patch: apply after import-* patches, and
    updated to skip flaky camerabin test causing FTBFS on arm64.

 -- Marc Deslauriers <email address hidden> Mon, 16 Dec 2024 13:36:08 -0500
CVE-2024-47537 GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp
CVE-2024-47539 GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s3
CVE-2024-47540 GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the
CVE-2024-47543 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container
CVE-2024-47544 GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null deref
CVE-2024-47545 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function wi
CVE-2024-47546 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function
CVE-2024-47596 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data func
CVE-2024-47597 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples with
CVE-2024-47598 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sampl
CVE-2024-47599 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47601 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47602 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47603 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the
CVE-2024-47613 GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identific
CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_pa
CVE-2024-47775 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function with
CVE-2024-47776 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavp
CVE-2024-47777 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_c
CVE-2024-47778 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk
CVE-2024-47834 GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the p


About   -   Send Feedback to @ubuntu_updates