Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3522: A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible. The highest threat from this vulnerability is to system availability.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gstreamer1-plugins-base | 0:1.10.4-2.amzn2.0.3 |
| Amazon Linux · 2 | gstreamer1-plugins-base-debuginfo | 0:1.10.4-2.amzn2.0.3 |
| Amazon Linux · 2 | gstreamer1-plugins-base-devel | 0:1.10.4-2.amzn2.0.3 |
| Amazon Linux · 2 | gstreamer1-plugins-base-devel-docs | 0:1.10.4-2.amzn2.0.3 |
| Amazon Linux · 2 | gstreamer1-plugins-base-tools | 0:1.10.4-2.amzn2.0.3 |
Vulnerabilities 1
-
Medium 5.5
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3522.html