UbuntuUpdates.org

Package "gstreamer1.0-plugins-good"

Name: gstreamer1.0-plugins-good

Description:

GStreamer plugins from the "good" set
Latest version: 1.24.2-1ubuntu1.3
Release: noble (24.04)
Level: security
Repository: main
Head package: gst-plugins-good1.0
Homepage: https://gstreamer.freedesktop.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gstreamer1.0-plugins-good"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gstreamer1.0-plugins-good" in Noble

Repository Area Version
base main 1.24.2-1ubuntu1
updates main 1.24.2-1ubuntu1.3

Changelog

Version: 1.24.2-1ubuntu1.3 2026-03-30 14:07:58 UTC

  gst-plugins-good1.0 (1.24.2-1ubuntu1.3) noble-security; urgency=medium

  * SECURITY UPDATE: multiple rtpqdm2depay code execution issues
    - debian/patches/CVE-2026-3083_5.patch: remove rtpqdm2depay element in
      docs/gst_plugins_cache.json, gst/rtp/gstrtp.c, gst/rtp/meson.build,
      gst/rtp/gstrtpqdmdepay.c, gst/rtp/gstrtpqdmdepay.h.
    - CVE-2026-3083
    - CVE-2026-3085

 -- Marc Deslauriers <email address hidden> Fri, 27 Mar 2026 13:07:25 -0400
Source diff to previous version
CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code
CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar

Version: 1.24.2-1ubuntu1.2 2025-08-26 17:08:08 UTC

  gst-plugins-good1.0 (1.24.2-1ubuntu1.2) noble-security; urgency=medium

  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47183.patch: use byte reader to parse mvhd
      box in gst/isomp4/qtdemux.c.
    - CVE-2025-47183
  * SECURITY UPDATE: buffer over-read in isomp4 plugin
    - debian/patches/CVE-2025-47219.patch: check if enough bytes are
      available for each stsd entry in gst/isomp4/qtdemux.c.
    - CVE-2025-47219

 -- Marc Deslauriers <email address hidden> Mon, 25 Aug 2025 10:28:03 -0400
Source diff to previous version
CVE-2025-47183 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leadin
CVE-2025-47219 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possib

Version: 1.24.2-1ubuntu1.1 2024-12-18 15:06:57 UTC

  gst-plugins-good1.0 (1.24.2-1ubuntu1.1) noble-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/202412-sec*.patch: backport upstream security fix
      commits from 1.24.10.
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47543,
      CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596,
      CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601,
      CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613,
      CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777,
      CVE-2024-47778, CVE-2024-47834

 -- Marc Deslauriers <email address hidden> Mon, 16 Dec 2024 13:36:08 -0500
CVE-2024-47537 GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp
CVE-2024-47539 GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s3
CVE-2024-47540 GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the
CVE-2024-47543 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container
CVE-2024-47544 GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null deref
CVE-2024-47545 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function wi
CVE-2024-47546 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function
CVE-2024-47596 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data func
CVE-2024-47597 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples with
CVE-2024-47598 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sampl
CVE-2024-47599 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47601 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47602 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47603 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the
CVE-2024-47613 GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identific
CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_pa
CVE-2024-47775 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function with
CVE-2024-47776 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavp
CVE-2024-47777 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_c
CVE-2024-47778 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk
CVE-2024-47834 GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the p


About   -   Send Feedback to @ubuntu_updates