Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:2302
HistoryMay 10, 2024 - 2:32 p.m.

gstreamer1-plugins-base security update

2024-05-1014:32:42
Rockylinux Product Errata
errata.rockylinux.org
5
gstreamer1-plugins-base
security update
rocky linux 9
cve-2023-37328
streaming media framework
cvss score
heap overwrite
subtitle parsing
vulnerability
release notes
cve page.

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

15.8%

An update is available for gstreamer1-plugins-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

  • gstreamer-plugins-base: heap overwrite in subtitle parsing (CVE-2023-37328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.