Summary
The GStreamer library provides a streaming media framework based on graphs of media data filters.
The libmad package is an MPEG audio decoder capable of 24-bit output.
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.
Security Fix(es):
* libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | gstreamer1 | 1.16.1-2.el8 |
| AlmaLinux · 8 | gstreamer1-devel | 1.16.1-2.el8 |
| AlmaLinux · 8 | gstreamer1-plugins-bad-free | 1.16.1-1.el8 |
| AlmaLinux · 8 | gstreamer1-plugins-bad-free-devel | 1.16.1-1.el8 |
| AlmaLinux · 8 | gstreamer1-plugins-ugly-free | 1.16.1-1.el8 |
| AlmaLinux · 8 | libmad | 0.15.1b-25.el8 |
| AlmaLinux · 8 | libmad-devel | 0.15.1b-25.el8 |
| AlmaLinux · 8 | orc | 0.4.28-3.el8 |
| AlmaLinux · 8 | orc-compiler | 0.4.28-3.el8 |
| AlmaLinux · 8 | orc-devel | 0.4.28-3.el8 |
| AlmaLinux · 8 | SDL2 | 2.0.10-2.el8 |
| AlmaLinux · 8 | SDL2-devel | 2.0.10-2.el8 |
| AlmaLinux · 8 | SDL2-static | 2.0.10-2.el8 |
Vulnerabilities 1
-
Unscored —
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denia…
References
-
report
https://vulners.com/cve/CVE-2018-7263