Package "gstreamer1.0-pulseaudio"
| Name: |
gstreamer1.0-pulseaudio
|
Description: |
GStreamer plugin for PulseAudio (transitional package)
|
| Latest version: |
1.20.3-0ubuntu1.10 |
| Release: |
jammy (22.04) |
| Level: |
updates |
| Repository: |
main |
| Head package: |
gst-plugins-good1.0 |
| Homepage: |
https://gstreamer.freedesktop.org |
Links
Download "gstreamer1.0-pulseaudio"
Other versions of "gstreamer1.0-pulseaudio" in Jammy
Changelog
|
gst-plugins-good1.0 (1.20.3-0ubuntu1.10) jammy-security; urgency=medium
* SECURITY UPDATE: Out-of-bounds read in FLAC parsing
- debian/patches/CVE-2026-17072.patch: Make sure enough data is
available when parsing FLAC headers.
in gst/matroska/matroska-ids.c
- CVE-2026-17072
* SECURITY UPDATE: Integer underflow in FUJIFILM metadata parsing
- debian/patches/CVE-2026-73433.patch: Make sure enough data is available
when parsing FUJIFILM strd in gst/avi/gstavidemux.c
- debian/patches/CVE-2026-73433-post1.patch: Improve
const-correctness in many places in gst/avi/gstavidemux.c
- CVE-2026-73433
* SECURITY UPDATE: Out-of-bounds read in gst_avi_demux_riff_parse_vprp
- debian/patches/CVE-2026-73434.patch: Use correct divisor for
calculating available number of vprp field infos in
gst/avi/gstavidemux.c
- CVE-2026-73434
* SECURITY UPDATE: Integer overflow in isomp4 plugin
- debian/patches/CVE-2026-88914-1.patch: Ensure enough data is available
for reading closed caption boxes in gst/isomp4/qtdemux.c
- debian/patches/CVE-2026-88914-2.patch: Don't try splitting CEA608
samples without known framerate in gst/isomp4/qtdemux.c
- CVE-2026-88914
-- Kyle Kernick Tue, 29 Sep 2026 11:54:49 -0600
|
| Source diff to previous version |
| CVE-2026-17072 |
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedde |
| CVE-2026-73433 |
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements |
| CVE-2026-73434 |
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc |
| CVE-2026-88914 |
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption |
|
|
gst-plugins-good1.0 (1.20.3-0ubuntu1.9) jammy-security; urgency=medium
* SECURITY UPDATE: Remote code execution in MRF file parsing
- debian/patches/CVE-2026-1829X.patch: Validate box sizes in
gst/isomp4/atomsrecovery.c
- CVE-2026-18295
- CVE-2026-18296
* SECURITY UPDATE: Remote code execution in PNG parsing
- debian/patches/CVE-2026-18298-1.patch: Drop rank to NONE in
docs/gst_plugins_cache.json and ext/gdk_pixbuf/gstgdkpixbufdec.c
- debian/patches/CVE-2026-18298-2.patch: Handle format and resolution
changes correctly in ext/gdk_pixbuf/gstgdkpixbufdec.c
- CVE-2026-18298
* SECURITY UPDATE: Remote code execution in RTP processing
- debian/patches/CVE-2026-18299-1.patch: Consider empty packets with the
last flag as bad packets in gst/rtp/gstrtpsbcdepay.c
- debian/patches/CVE-2026-18299-2.patch: Check that enough data is
available for the payload header in gst/rtp/gstrtpsbcdepay.c
- debian/patches/CVE-2026-18299-post1.patch: Remove wrong variable
shadowing in gst/rtp/gstrtpsbcdepay.c
- CVE-2026-18299
-- Kyle Kernick Thu, 17 Sep 2026 13:04:33 -0600
|
| Source diff to previous version |
| CVE-2026-1829 |
The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via th |
| CVE-2026-18295 |
GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c |
| CVE-2026-18296 |
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi |
| CVE-2026-18298 |
GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi |
| CVE-2026-18299 |
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff |
|
|
gst-plugins-good1.0 (1.20.3-0ubuntu1.8) jammy-security; urgency=medium
* SECURITY UPDATE: Denail of Service via RTP Framement Overflow
- debian/patches/CVE-2026-18649-1.patch: rtph264depay: rtph265depay: Limit
the maximum fragmentation unit size in docs/gst_plugins_cache.json,
gst/rtp/gstrtph264depay.c, gst/rtp/gstrtph264depay.h,
gst/rtp/gstrtph265depay.c, gst/rtp/gstrtph265depay.h.
- debian/patches/CVE-2026-18649-2.patch: rtph264depay: rtph265depay: Reset
missing fields when resetting during fragmentation unit handling in
gst/rtp/gstrtph264depay.c, gst/rtp/gstrtph265depay.c.
- CVE-2026-18649
-- John Breton Wed, 16 Sep 2026 10:38:30 -0400
|
| Source diff to previous version |
| CVE-2026-18649 |
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size |
|
|
gst-plugins-good1.0 (1.20.3-0ubuntu1.6) jammy-security; urgency=medium
* SECURITY UPDATE: DoS when parsing MP4 audio tracks
- debian/patches/CVE-2026-464xx.patch: qtdemux: Avoid division by zero if
0 audio channels are signalled in gst/isomp4/qtdemux.c.
- CVE-2026-46469
- CVE-2026-46470
-- Marc Deslauriers <email address hidden> Sun, 24 May 2026 14:23:18 -0400
|
| CVE-2026-46469 |
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function d |
| CVE-2026-46470 |
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function d |
|
About
-
Send Feedback to @ubuntu_updates
