RHSA-2009:0271: Important: gstreamer-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters whichoperate on media data. GStreamer Good Plug-ins is a collection ofwell-supported, GStreamer plug-ins of good quality released under the LGPLlicense.Multiple heap buffer overflows and an array indexing error were found inthe GStreamer's QuickTime media file format decoding plugin. An attackercould create a carefully-crafted QuickTime media .mov file that would causean application using GStreamer to crash or, potentially, execute arbitrarycode if played by a victim. (CVE-2009-0386, CVE-2009-0387, CVE-2009-0397)All users of gstreamer-plugins-good are advised to upgrade to these updatedpackages, which contain backported patches to correct these issues. Afterinstalling the update, all applications using GStreamer (such as totem orrhythmbox) must be restarted for the changes to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:0271?
The severity of RHSA-2009:0271 is classified as critical due to multiple heap buffer overflows.
How do I fix RHSA-2009:0271?
To fix RHSA-2009:0271, upgrade the gstreamer-plugins-good and gstreamer-plugins-good-devel packages to version 0.10.9-1.el5_3.1 or later.
What systems are affected by RHSA-2009:0271?
RHSA-2009:0271 affects systems running gstreamer-plugins-good and gstreamer-plugins-good-devel packages prior to version 0.10.9-1.el5_3.1.
What vulnerabilities are addressed in RHSA-2009:0271?
RHSA-2009:0271 addresses multiple heap buffer overflow vulnerabilities in the GStreamer Good Plug-ins.
Is it safe to use software affected by RHSA-2009:0271?
No, it is not safe to use software affected by RHSA-2009:0271 as it poses significant security risks.