UbuntuUpdates.org

Package "gstreamer1.0-plugins-base"

Name: gstreamer1.0-plugins-base

Description:

GStreamer plugins from the "base" set

Latest version: 1.24.8-1ubuntu0.1
Release: oracular (24.10)
Level: updates
Repository: main
Head package: gst-plugins-base1.0
Homepage: https://gstreamer.freedesktop.org

Links


Download "gstreamer1.0-plugins-base"


Other versions of "gstreamer1.0-plugins-base" in Oracular

Repository Area Version
base main 1.24.8-1
security main 1.24.8-1ubuntu0.1

Changelog

Version: 1.24.8-1ubuntu0.1 2024-12-18 17:07:12 UTC

  gst-plugins-base1.0 (1.24.8-1ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/202412-sec*.patch: backport upstream security fix
      commits from 1.24.10.
    - CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
      CVE-2024-47607, CVE-2024-47615, CVE-2024-47835

 -- Marc Deslauriers <email address hidden> Tue, 17 Dec 2024 08:24:56 -0500

CVE-2024-47538 GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identific
CVE-2024-47541 GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remo
CVE-2024-47542 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_u
CVE-2024-47600 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask f
CVE-2024-47607 GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_heade
CVE-2024-47615 GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_pa
CVE-2024-47835 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_



About   -   Send Feedback to @ubuntu_updates