Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gst-plugins-base | * | < 1.24.10 | >= 1.24.10 |
| media-libs/gstreamer | * | < 1.24.10 | >= 1.24.10 |
GStreamer is an open source multimedia framework.
Multiple vulnerabilities have been discovered in GStreamer, GStreamer Plugins. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GStreamer, GStreamer Plugins users should upgrade to the latest versions:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gstreamer-1.24.10" ">=media-libs/gst-plugins-bad-1.24.10"
Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gst-plugins-bad | * | < 1.22.11-r1 | >= 1.22.11-r1 |
| media-libs/gstreamer | * | < 1.22.11 | >= 1.22.11 |
GStreamer is an open source multimedia framework.
Multiple vulnerabilities have been discovered in GStreamer, GStreamer Plugins. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GStreamer, GStreamer Plugins users should upgrade to the latest versions:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gstreamer-1.22.11" ">=media-libs/gst-plugins-bad-1.22.11-r1"
Multiple vulnerabilities have been found in GStreamer and its plugins, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gst-plugins-bad | * | < 1.16.3 | >= 1.16.3 |
| media-libs/gst-plugins-base | * | < 1.18.4 | >= 1.18.4 |
| media-libs/gst-plugins-good | * | < 1.18.4 | >= 1.18.4 |
| media-libs/gst-plugins-ugly | * | < 1.18.4 | >= 1.18.4 |
| media-libs/gstreamer | * | < 1.20.2 | >= 1.20.2 |
| media-plugins/gst-plugins-libav | * | < 1.18.4 | >= 1.18.4 |
GStreamer is an open source multimedia framework.
Multiple vulnerabilities have been found in GStreamer and its plugins. Please review the CVE and GStreamer-SA identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GStreamer users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gstreamer-1.20.2"
All gst-plugins-bad users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gst-plugins-bad-1.20.2"
All gst-plugins-good users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gst-plugins-good-1.20.2"
All gst-plugins-ugly users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gst-plugins-ugly-1.20.2"
All gst-plugins-base users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gst-plugins-base-1.20.2"
All gst-plugins-libav users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-plugins/gst-plugins-libav-1.20.2"
A buffer overflow in GStreamer could allow remote attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/gst-plugins-bad | * | < 0.10.23-r3 | >= 0.10.23-r3 (revision) |
| media-libs/gstreamer | * | < 1.4.5 | >= 1.4.5, >= 0.10.36-r2 (revision) |
GStreamer is an open source multimedia framework.
A buffer overflow vulnerability has been found in the parsing of H.264 formatted video.
A remote attacker could entice a user to open a specially crafted H.264 formatted video using an application linked against GStreamer, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All GStreamer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/gstreamer-1.4.5"