SUSE-SU-2020:1300-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375...

GStreamer, libmad, and SDL security, bug fix, and enhancement update

gstreamer1 1.16.1-2 - Update to 1.16.2 for correctly pick up for side gating - Resolves: rhbz1756299 1.16.1-1 - Update to 1.16.1 - Enable libcap for the ptp helper permissions - Resolves: rhbz1756299 gstreamer1-plugins-bad-free 1.16.1-1 - Update to 1.16.1 - Remove upstreamed patches - Remove...

Low: Red Hat Security Advisory: GStreamer, libmad, and SDL security, bug fix, and enhancement update

An update for GStreamer, libmad, and SDL is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RLSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

GStreamer, libmad, and SDL security, bug fix, and enhancement update

An update is available for libmad, gstreamer1-plugins-ugly-free, gstreamer1-plugins-bad-free, SDL2, orc, gstreamer1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

ALSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer...

openSUSE Security Update : gstreamer-rtsp-server (openSUSE-2020-535)

This update for gstreamer-rtsp-server fixes the following issues : - CVE-2020-6095: Fixed a NULL pointer dereference when handling an invalid basic Authorization header boo1168026. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE: Security Advisory for gstreamer-rtsp-server (openSUSE-SU-2020:0535-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0535-1 Security update for gstreamer-rtsp-server

This update for gstreamer-rtsp-server fixes the following issues: - CVE-2020-6095: Fixed a NULL pointer dereference when handling an invalid basic Authorization header boo1168026...

Security update for gstreamer-rtsp-server (moderate)

openSUSE Security Update: Security update for gstreamer-rtsp-server Announcement ID: openSUSE-SU-2020:0535-1 Rating: moderate References: 1168026 Cross-References: CVE-2020-6095 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now...

Denial Of Service (DoS)

GStreamer is denial of service DoS. Multiple integer overflow flaws, that could lead to a buffer overflow, were found in the GStreamer Good Plug-ins PNG decoding handler. An attacker could create a specially-crafted PNG file that would cause an application using the GStreamer Good Plug-ins librar...

Arbitrary Code Execution

gstreamer-plugins-base is vulnerable to arbitrary code execution. An integer overflow flaw which caused a heap-based buffer overflow was discovered in the Vorbis comment tags reader. An attacker could create a carefully-crafted Vorbis file that would cause an application using GStreamer to crash...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

CVE-2019-9928

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution...

Debian DLA-2164-1 : gst-plugins-bad0.10 security update

Several issues have been found in gst-plugins-bad0.10, a package containing GStreamer plugins from the 'bad' set. All issues are about use-after-free, out of bounds reads or buffer overflow in different modules. For Debian 8 'Jessie', these problems have been fixed in version 0.10.23-7.4+deb8u3. ...

[SECURITY] [DLA 2164-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.4+deb8u3 CVE ID : CVE-2015-0797 CVE-2016-9809 CVE-2017-5843 CVE-2017-5848 Several issues have been found in gst-plugins-bad0.10, a package containing GStreamer plugins from the "bad" set. All issues are about use-after-free, out of bounds reads or...

CVE-2020-6095

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerabili...