Skip to content
OpenAdvisories
Medium ELSA-2025-7243 4 CVEs

Moderate: gstreamer1-plugins-base security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

[1.22.12-4]
- Bump version
- Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
Resolves: RHEL-71019, RHEL-70995, RHEL-71163

[1.22.12-3]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-2]
- Rebuild
- Resolves: RHEL-38511, RHEL-41157

[1.22.12-1]
- Update to 1.22.12

[1.22.9-2]
- Disable libvisual in RHEL builds

[1.22.9-1]
- 1.22.9

[1.22.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.22.8-1]
- 1.22.8

[1.22.7-1]
- 1.22.7

[1.22.5-1]
- Update to 1.22.5

[1.22.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.22.3-2]
- Disable cdparanoia in RHEL builds

[1.22.3-1]
- Update to 1.22.3

[1.22.2-1]
- Update to 1.22.2

[1.22.1-1]
- Update to 1.22.1

[1.22.0-1]
- Update to 1.22.0

[1.21.90-1]
- Update to 1.21.90

[1.20.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.20.5-1]
- Update to 1.20.5

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 gstreamer1-plugins-base 0:1.22.12-4.el9
Oracle Linux · 9 gstreamer1-plugins-base-devel 0:1.22.12-4.el9
Oracle Linux · 9 gstreamer1-plugins-base-tools 0:1.22.12-4.el9

Vulnerabilities 4

  • Medium 6.9
    CVE-2024-47541

    GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser

    GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is responsible for parsing and removing SS…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 6.8
    CVE-2024-47542

    GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr.frame_data, the poi…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 6.8
    CVE-2024-47835

    GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the stri…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 5.1
    CVE-2024-47600

    GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed…

    GStreamer GStreamer gst-plugins-base1.0 gstreamer1 Debian Ubuntu Azure Linux Alpine