RHSA-2009:0270: Important: gstreamer-plugins security update
The gstreamer-plugins package contains plugins used by the GStreamerstreaming-media framework to support a wide variety of media types.A heap buffer overflow was found in the GStreamer's QuickTime media fileformat decoding plug-in. An attacker could create a carefully-craftedQuickTime media .mov file that would cause an application using GStreamerto crash or, potentially, execute arbitrary code if played by a victim.(CVE-2009-0397)All users of gstreamer-plugins are advised to upgrade to these updatedpackages, which contain a backported patch to correct this issue. Afterinstalling the update, all applications using GStreamer (such as rhythmbox)must be restarted for the changes to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:0270?
The severity of RHSA-2009:0270 is classified as important due to the potential for a heap buffer overflow.
How do I fix RHSA-2009:0270?
To fix RHSA-2009:0270, update the gstreamer-plugins package to the latest version provided by your distribution.
What impact does RHSA-2009:0270 have on my system?
RHSA-2009:0270 can allow attackers to execute arbitrary code via a carefully crafted QuickTime media file.
Which versions are affected by RHSA-2009:0270?
RHSA-2009:0270 affects specific versions of the gstreamer-plugins package prior to the fix.
Are there any workarounds for RHSA-2009:0270?
Currently, no specific workarounds for RHSA-2009:0270 are recommended other than applying the necessary updates.