Skip to content
OpenAdvisories
Medium ELSA-2025-7178 2 CVEs

Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

gstreamer1
[1.22.12-3]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-2]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-1]
- Update to 1.22.12

[1.22.9-1]
- 1.22.9

[1.22.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-1]
- 1.22.8

[1.22.7-2]
- Set cap information correctly
- Resolves: rhbz#2238703

[1.22.7-1]
- 1.22.7

[1.22.6-1]
- 1.22.6

[1.22.5-1]
- Update to 1.22.5

[1.22.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.22.4-1]
- 1.22.4

[1.22.3-2]
- Do setcap on gst-ptp-helper to give the right permissions.

[1.22.3-1]
- Update to 1.22.3

[1.22.2-1]
- Update to 1.22.2

[1.22.1-1]
- Update to 1.22.1

[1.22.0-1]
- Update to 1.22.0

[1.21.90-1]
- Update to 1.21.90

[1.20.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.20.5-1]
- Update to 1.20.5

gstreamer1-plugins-bad-free
[1.22.12-3]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-2]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-1]
- 1.22.12

[1.22.11-1]
- 1.22.11

[1.22.9-3]
- Add gstreamer1-plugin-openh264 subpackage with the openh264 plugin

[1.22.9-2]
- Rebuilt for opencv-4.9.0

[1.22.9-1]
- 1.22.9

[1.22.8-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-3]
- Backport of 'va: fixes for Mesa driver'
- Resolves: rhbz#2256693

[1.22.8-2]
- Enable dvbsuboverlay and siren plugins
- Enable avtp, dtsdec, and flite plugins in extras

[1.22.8-1]
- 1.22.8

[1.22.7-2]
- Move gstva from extras into main package

[1.22.7-1]
- 1.22.7

[1.22.5-2]
- Separate libs subpackage
- Enable opencv as separate subpackage

[1.22.5-1]
- Update to 1.22.5

[1.22.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.22.3-1]
- Update to 1.22.3

[1.22.2-4]
- Remove obsolete of plugins-bad-freeworld to workaround a dnf bug
https://bugzilla.redhat.com/show_bug.cgi?id=1867376#c9

[1.22.2-3]
- Fix migration of musepack and voamrwbenc to -bad-free-extras

[1.22.2-2]
- Enable musepack and voamrwbenc in extras

[1.22.2-1]
- Update to 1.22.2

[1.22.1-1]
- Update to 1.22.1

[1.22.0-1]
- Update to 1.22.0

[1.21.90-1]
- Update to 1.21.90

[1.20.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.20.5-1]
- Update to 1.20.5
- Remove unwanted crypto dependencies.

[1.20.4-2]
- Drop vdpau configure option
- The libgstva plugin is now excluded from file listings when disabled
- Resolves: rhbz#2141093

gstreamer1-plugins-ugly-free
[1.22.12-3]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-2]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-1]
- 1.22.12

[1.22.11-1]
- 1.22.11

[1.22.9-1]
- 1.22.9

[1.22.8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-2]
- Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
- Disable AMR plugins in RHEL builds
- Resolves: rhbz#2236889

[1.22.8-1]
- 1.22.8

[1.22.7-1]
- 1.22.7

[1.22.5-1]
- Update to 1.22.5

[1.22.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.22.3-1]
- Update to 1.22.3

[1.22.2-1]
- Update to 1.22.2

[1.22.1-2]
- Rebuild for new AMR plugins.

gstreamer1-rtsp-server
[1.22.12-3]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-2]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-1]
- 1.22.12

[1.22.11-1]
- 1.22.11

[1.22.9-1]
- 1.22.9

[1.22.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-1]
- 1.22.8

[1.22.7-1]
- 1.22.7

[1.22.5-1]
- Update to 1.22.5

[1.22.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.22.3-1]
- Update to 1.22.3

[1.22.2-1]
- Update to 1.22.2

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 gstreamer1 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-devel 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-plugins-bad-free 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-plugins-bad-free-devel 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-plugins-bad-free-libs 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-plugins-ugly-free 0:1.22.12-3.el9
Oracle Linux · 9 gstreamer1-rtsp-server 0:1.22.12-3.el9

Vulnerabilities 2

  • High 7.8
    CVE-2024-4453

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-0444

    GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine