Moderate: gstreamer1-plugins-base security update
Summary
ALSA-2024:3088: Moderate: gstreamer1-plugins-base security update. Affects gstreamer1-plugins-base versions < 1.16.1-3.el8. Fixed in 1.16.1-3.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.
Vulnerability Detail
The gstreamer1-plugins-base package is affected by a heap overwrite vulnerability in subtitle parsing (CVE-2023-37328). This vulnerability could allow an attacker to overwrite heap memory, potentially leading to arbitrary code execution or a denial of service attack.
How To Fix
Minimum fixed version
1.16.1-3.el8
This is the first release that contains the fix.
sudo dnf update gstreamer1-plugins-baseTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is important to update the gstreamer1-plugins-base package to the latest version to mitigate the risk of this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for gstreamer1-plugins-base →
FAQ
GStreamer is a streaming media framework based on graphs of filters which operate on media data.
gstreamer1-plugins-base is a package that contains a collection of well-maintained base plug-ins for GStreamer.
This vulnerability could allow an attacker to overwrite heap memory, potentially leading to arbitrary code execution or a denial of service attack.
To fix this vulnerability, update the gstreamer1-plugins-base package to version 1.16.1-3.el8 or later.
You can find more information about this vulnerability in the CVE page(s) listed in the References section of the AlmaLinux Release Notes.
Related vulnerabilities
Recent vulnerabilities recorded for gstreamer1-plugins-base.
