UbuntuUpdates.org

Package "gstreamer1.0-qt5"

Name: gstreamer1.0-qt5

Description:

GStreamer plugin for Qt5
Latest version: 1.20.3-0ubuntu1.3
Release: jammy (22.04)
Level: security
Repository: universe
Head package: gst-plugins-good1.0
Homepage: https://gstreamer.freedesktop.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gstreamer1.0-qt5"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gstreamer1.0-qt5" in Jammy

Repository Area Version
base universe 1.20.1-1ubuntu1
updates universe 1.20.3-0ubuntu1.3

Changelog

Version: 1.20.3-0ubuntu1.3 2024-12-18 15:06:56 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/202412-sec*.patch: backport upstream security fix
      commits from 1.24.10.
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47543,
      CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596,
      CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601,
      CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613,
      CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777,
      CVE-2024-47778, CVE-2024-47834
  * debian/Skip-failing-tests.patch: apply after import-* patches, and
    updated to skip flaky camerabin test causing FTBFS on arm64.

 -- Marc Deslauriers <email address hidden> Mon, 16 Dec 2024 13:36:08 -0500
Source diff to previous version
CVE-2024-47537 GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp
CVE-2024-47539 GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s3
CVE-2024-47540 GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the
CVE-2024-47543 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container
CVE-2024-47544 GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null deref
CVE-2024-47545 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function wi
CVE-2024-47546 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function
CVE-2024-47596 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data func
CVE-2024-47597 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples with
CVE-2024-47598 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sampl
CVE-2024-47599 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47601 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47602 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47603 GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_
CVE-2024-47606 GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_the
CVE-2024-47613 GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identific
CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_pa
CVE-2024-47775 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function with
CVE-2024-47776 GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavp
CVE-2024-47777 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_c
CVE-2024-47778 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk
CVE-2024-47834 GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the p

Version: 1.20.3-0ubuntu1.1 2023-08-02 18:07:13 UTC

  gst-plugins-good1.0 (1.20.3-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Integer overflow leading to heap overwrite in FLAC
    image tag handling
    - debian/patches/CVE-2023-37327-1.patch: avoid integer overflow in
      available data check for image tags in
      gst/audioparsers/gstflacparse.c.
    - CVE-2023-37327

 -- Marc Deslauriers <email address hidden> Tue, 01 Aug 2023 08:51:15 -0400
CVE-2023-37327 Integer overflow leading to heap overwrite in FLAC image tag handling


About   -   Send Feedback to @ubuntu_updates