OESA-2022-1736

Dashboard / Vulnerabilities / OESA-2022-1736

OESA-2022-1736

Summary: gstreamer1-plugins-good security update

Details: GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): Potential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920) Potential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122) Heap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924) Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1736, https://nvd.nist.gov/vuln/detail/CVE-2022-1920, https://nvd.nist.gov/vuln/detail/CVE-2022-2122, https://nvd.nist.gov/vuln/detail/CVE-2022-1921, https://nvd.nist.gov/vuln/detail/CVE-2022-1922, https://nvd.nist.gov/vuln/detail/CVE-2022-1923, https://nvd.nist.gov/vuln/detail/CVE-2022-1924, https://nvd.nist.gov/vuln/detail/CVE-2022-1925