DSA-5204: -1 gst-plugins-good1.0 -- security update

Published Aug 9, 2022

Updated

Adam Doupe discovered multiple vulnerabilities in the Gstreamer plugins to demux Mastroska and AVI files which could result in denial of service or the execution of arbitrary code.

Affected Software

2 affected components

debian/gst-plugins-good1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade gst-plugins-good1.0 to a version that resolves this vulnerability.
Patch DSA-5204-1

Event History

Aug 9, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What kinds of media files are relevant to these vulnerabilities?

The affected GStreamer plugins are used to demux Matroska and AVI files. Systems that process untrusted files in either format are the relevant exposure scenario.

What could exploitation cause?

The reported impact includes denial of service or execution of arbitrary code.

Which CVEs are covered by this update?

The update addresses CVE-2022-1920, CVE-2022-1921, and CVE-2022-1922.