Summary
The GStreamer library provides a streaming media framework based on graphs of media data filters.
The libmad package is an MPEG audio decoder capable of 24-bit output.
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.
Security Fix(es):
* libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | gstreamer1 | 0:1.16.1-2.el8 |
| Rocky Linux · 8 | gstreamer1-plugins-bad-free | 0:1.16.1-1.el8 |
| Rocky Linux · 8 | gstreamer1-plugins-ugly-free | 0:1.16.1-1.el8 |
| Rocky Linux · 8 | libmad | 0:0.15.1b-25.el8 |
| Rocky Linux · 8 | orc | 0:0.4.28-3.el8 |
| Rocky Linux · 8 | SDL2 | 0:2.0.10-2.el8 |
Vulnerabilities 1
-
Unscored —
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denia…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488585
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1547504
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1693292
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724677
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1751780
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1756299